3.2: Internet communication security countermeasures

Question 1

firewalls

Answer 1

Firewalls are devices that control the flow of messages between networks. Placed at the boundary between the Internet and an organization’s internal network, firewalls enforce a security policy by prohibiting all inbound traffic except for the specific few types of traffic that are permitted to a select few systems.

Question 2

Types of firewall

Answer 2

• Screening routers
• Stateful inspection firewall
• Application firewall

Question 3

Screening routers

Answer 3

• Screening routers These simpler firewalls are designed to examine each packet and compare it to an access control list (ACL) to determine whether, based on its source and destination IP addresses and ports, it should be permitted to pass through the firewall.

Question 4

Stateful inspection firewall

Answer 4

Designed to record incoming packets and keep track of TCP/IP sessions between external and internal.

Stateful inspection firewalls are more complex and capable of more effectively protecting an organization’s network.hosts.

Question 5

What happens to packet in the TCP protocol

Answer 5

In the TCP protocol, an incoming packet is answered with an outgoing packet and make a go/no-go decision based on whether it believes that the outgoing packet is part of an active session

Question 6

Application firewall

Answer 6

Application firewalls are devices that are designed to protect web-based applications from application layer attacks.
Application firewalls are designed to block application layer attacks, but not necessarily act as a general-purpose firewall.

Question 7

DMZ

Answer 7

a separate network where Internet-facing systems are attached and isolated with one or more firewalls.

The rules in the firewall(s) will permit specific services from the Internet to reach the DMZ servers, but will not permit access from the Internet to the internal network.

Question 8

Honeypot

Answer 8

A honeypot is a trap that is designed to detect unauthorized use of information systems.

A honeypot will have the appearance of a system containing important information and of being unprotected and unmonitored.

Question 9

Honeynets

Answer 9

A network of computers that are all acting as honeypots to emulate a complex production environment that consists of several computers.