Question 1

Describe a firewall policy for application traffic.

Accepted Answer

A firewall policy is an addition to the ...

Question 2

What is a cleanup rule? Provide an example.

Accepted Answer

A cleanup rule handles any other packets...

Question 3

Which of the following is a method for supporting IPv6 on IPv4 networks until IPv6 is universally adopted?

Accepted Answer

A)   Teredo tunneling
B)   ICMPv6 encapsulation
C)   IPsec tunneling
D)   SMTP/S tunnelingE) A) and B)
F) C) and D)

Question 4

ACLs filter packets by using a __________ base to determine whether to allow a packet to pass.

Accepted Answer

rule

Question 5

What should a company concerned about protecting its data warehouses and employee privacy might consider installing on the network perimeter to prevent direct connections between the internal network and the Internet?

Accepted Answer

A)   router
B)   VPN server
C)   ICMP monitor
D)   proxy serverE) B) and C)
F) None of the above D

Question 6

A firewall can consist of all devices positioned on the network _____________.

Accepted Answer

The answer of A firewall can consist of all devices...

Question 7

Software firewalls are usually more scalable than hardware firewalls.

Accepted Answer

A) True 
 B)False

Question 8

Which of the following is a general practice for a rule base?

Accepted Answer

A)   begin by blocking all traffic and end by allowing selective services
B)   permit access to public servers in the DMZ
C)   allow all access to the firewall
D)   allow direct access from the Internet to computers behind the firewallE) A) and D)
F) A) and C)

Question 9

MATCHING
-hardware or software configured to block unauthorized access to a network

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filtersK) None of the above
L) D) and H) B

Question 10

MATCHING
-a packet-filtering rule that comes last in a rule base and covers any packets that have not been covered by preceding rules

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filtersK) A) and C)
L) D) and F)

Question 11

What service uses UDP port 53?

Accepted Answer

A)   SMTP
B)   DNS
C)   ICMP
D)   TFTPE) A) and B)
F) B) and D)

Question 12

Which of the following is an advantage of hardware firewalls?

Accepted Answer

A)   not scalable compared to software firewalls
B)   not dependent on a conventional OS
C)   less expensive than software firewalls
D)   easy to patchE) A) and C)
F) None of the above

Question 13

Which two ports should packet-filtering rules address when establishing rules for Web access?

Accepted Answer

A)   143, 80
B)   25, 110
C)   80, 443
D)   423, 88E) A) and B)
F) A) and C)

Question 14

Generally,connections to instant-messaging ports are harmless and should be allowed.

Accepted Answer

A) True 
 B)False

Question 15

A primary objective of a rule base is to ______________ communications based on complex rules.

Accepted Answer

The answer of A primary objective of a rule base...

Question 16

What makes an effective rule base? List three points to consider.

Accepted Answer

It should be based on the organization's...

Question 17

MATCHING
-software that forwards network packets and caches Web pages to speed up network performance

Accepted Answer

A)  cleanup rule
B)  firewall
C)  firewall appliance
D)  firewall policy
E)  proxy serverF) rule baseG) socketH) state tableI) stateful packet filtersJ) stateless packet filtersK) A) and E)
L) A) and I)

Question 18

Which of the following is a typical drawback of a free firewall program?

Accepted Answer

A)   cannot monitor traffic in real time
B)   oversimplified configuration
C)   have centralized management
D)   more expensive than hardware firewallsE) All of the above
F) B) and C)

Question 19

What is considered the 'cleanup rule' on a Cisco router?

Accepted Answer

A)   explicit allow all
B)   implicit deny all
C)   explicit prompt
D)   implicit allowE) A) and B)
F) B) and D)

Question 20

Firewalls can protect against employees copying confidential data from within the network.

Accepted Answer

A) True 
 B)False

Exam 9: Firewalls

Describe a firewall policy for application traffic.

Correct AnswerverifiedA firewall policy is an addition to the ...View AnswerShow Answer

What is a cleanup rule? Provide an example.

Correct AnswerverifiedA cleanup rule handles any other packets...View AnswerShow Answer

Which of the following is a method for supporting IPv6 on IPv4 networks until IPv6 is universally adopted?

Correct AnswerverifiedShow Answer

ACLs filter packets by using a __________ base to determine whether to allow a packet to pass.

Correct Answerverifiedrule

What should a company concerned about protecting its data warehouses and employee privacy might consider installing on the network perimeter to prevent direct connections between the internal network and the Internet?

Correct AnswerverifiedD

A firewall can consist of all devices positioned on the network _____________.

Correct AnswerverifiedShow Answer

Software firewalls are usually more scalable than hardware firewalls.

Correct AnswerverifiedShow Answer

Which of the following is a general practice for a rule base?

Correct AnswerverifiedShow Answer

MATCHING -hardware or software configured to block unauthorized access to a network

Correct AnswerverifiedB

MATCHING -a packet-filtering rule that comes last in a rule base and covers any packets that have not been covered by preceding rules

Correct AnswerverifiedShow Answer

What service uses UDP port 53?

Correct AnswerverifiedShow Answer

Which of the following is an advantage of hardware firewalls?

Correct AnswerverifiedShow Answer

Which two ports should packet-filtering rules address when establishing rules for Web access?

Correct AnswerverifiedShow Answer

Generally,connections to instant-messaging ports are harmless and should be allowed.

Correct AnswerverifiedShow Answer

A primary objective of a rule base is to ______________ communications based on complex rules.

Correct AnswerverifiedShow Answer

What makes an effective rule base? List three points to consider.

Correct AnswerverifiedIt should be based on the organization's...View AnswerShow Answer

MATCHING -software that forwards network packets and caches Web pages to speed up network performance

Correct AnswerverifiedShow Answer

Which of the following is a typical drawback of a free firewall program?

Correct AnswerverifiedShow Answer

What is considered the 'cleanup rule' on a Cisco router?

Correct AnswerverifiedShow Answer

Firewalls can protect against employees copying confidential data from within the network.

Correct AnswerverifiedShow Answer

Correct Answer
verified
A firewall policy is an addition to the ...
View Answer

Correct Answer
verified
A cleanup rule handles any other packets...
View Answer

Correct Answer
verified

Correct Answer
verified
rule

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
It should be based on the organization's...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified