Question 1

Firewalls typically have antivirus filtering.

Accepted Answer

A) True 
 B)False

Question 2

Both border firewalls and internal firewalls are complex to set up.

Accepted Answer

A) True 
 B)False

Question 3

________ consist of a series of rules that are exceptions to the default behavior.

Accepted Answer

A)   IPS
B)   SPI
C)   IDS
D)   ACLs

Question 4

________ firewalls handle traditional firewall processing, antivirus filtering, and spam filtering.

Accepted Answer

A)   Unified threat management
B)   Ingress
C)   Egress
D)   Static packet filter

Question 5

A ________ is made by a firewall.

Accepted Answer

A)   NAT/PAT
B)   unified threat
C)   pass/deny decision
D)   log file

Question 6

Multihoming tends to make it easier to develop rules to control access to public-facing hosts and internal hosts.

Accepted Answer

A) True 
 B)False

Question 7

DMZs never have more than two kinds of hosts.

Accepted Answer

A) True 
 B)False

Question 8

________ firewalls examine application messages in depth.

Accepted Answer

A)   Application proxy
B)   Unified threat management
C)   Egress
D)   Static packet filter

Question 9

Hardware filtering is much faster than software filtering,

Accepted Answer

A) True 
 B)False

Question 10

SPI application inspection provides the same automatic protections offered by application proxy firewalls.

Accepted Answer

A) True 
 B)False

Question 11

________ means that a border firewall is connected to multiple subnets.

Accepted Answer

A)   DMZ
B)   Multihomed
C)   Logging
D)   Ingress filtering

Question 12

Intrusion prevention system filtering is considered ________.

Accepted Answer

A)   a new type of filtering
B)   old technology
C)   one of the most effective and long-used type of filtering
D)   too expensive and too time-consuming for most businesses

Question 13

Which of the following is NOT a type of filtering?

Accepted Answer

A)   Stateful packet inspection
B)   Static packet
C)   Antivirus
D)   Authentication

Question 14

Normally, firewalls are configured to only log packets that they drop.

Accepted Answer

A) True 
 B)False

Question 15

A connection is a persistent conversation between different programs on different computers.

Accepted Answer

A) True 
 B)False

Question 16

Port numbers ranging from 1024 to 49151 are ________.

Accepted Answer

A)   source ports
B)   registered ports
C)   ephemeral ports
D)   TCP ports

Question 17

Antivirus filtering uses signatures to detect viruses, worms, and Trojan horses.

Accepted Answer

A) True 
 B)False

Question 18

When a firewall examines a packet passing through it, it will drop the packet if it is ________.

Accepted Answer

A)   a provable attack packet
B)   a suspicious packet
C)   not a provable attack packet
D)   a stateful packet

Question 19

________ is typically considered the most time-consuming part of firewall administration.

Accepted Answer

A)   Installing software
B)   Configuring hardware
C)   Reading firewall logs
D)   Creating policies

Question 20

________ identify suspicious packets that may or may not be parts of attacks.

Accepted Answer

A)   IDSs
B)   Firewalls
C)   Static packet inspection
D)   Deep packet inspection

Exam 6: Firewalls

DMZs never have more than two kinds of hosts.

Correct AnswerverifiedShow Answer

A connection is a persistent conversation between different programs on different computers.

Correct AnswerverifiedShow Answer

________ firewalls handle traditional firewall processing, antivirus filtering, and spam filtering.

Correct AnswerverifiedShow Answer

________ means that a border firewall is connected to multiple subnets.

Correct AnswerverifiedShow Answer

Hardware filtering is much faster than software filtering,

Correct AnswerverifiedShow Answer

Intrusion prevention system filtering is considered ________.

Correct AnswerverifiedShow Answer

Multihoming tends to make it easier to develop rules to control access to public-facing hosts and internal hosts.

Correct AnswerverifiedShow Answer

________ identify suspicious packets that may or may not be parts of attacks.

Correct AnswerverifiedShow Answer

When a firewall examines a packet passing through it, it will drop the packet if it is ________.

Correct AnswerverifiedShow Answer

Normally, firewalls are configured to only log packets that they drop.

Correct AnswerverifiedShow Answer

Firewalls typically have antivirus filtering.

Correct AnswerverifiedShow Answer

________ is typically considered the most time-consuming part of firewall administration.

Correct AnswerverifiedShow Answer

Port numbers ranging from 1024 to 49151 are ________.

Correct AnswerverifiedShow Answer

Antivirus filtering uses signatures to detect viruses, worms, and Trojan horses.

Correct AnswerverifiedShow Answer

Which of the following is NOT a type of filtering?

Correct AnswerverifiedShow Answer

________ consist of a series of rules that are exceptions to the default behavior.

Correct AnswerverifiedShow Answer

SPI application inspection provides the same automatic protections offered by application proxy firewalls.

Correct AnswerverifiedShow Answer

Both border firewalls and internal firewalls are complex to set up.

Correct AnswerverifiedShow Answer

________ firewalls examine application messages in depth.

Correct AnswerverifiedShow Answer

A ________ is made by a firewall.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified