Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Advanced Topics > Ayda Test 1 > Flashcards

Ayda Test 1 Flashcards

1
Q

where can you configure firewalls?

A

device
virtual appliance
software component of an OS
software component on a network device (eg router)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A firewall Permits desirable traffic to be transported between what?

A

untrusted network/host to a trusted network/host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does a firewall execute to permit and/or prevent network traffic?

A

it executes rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

A firewall prevents ______ ________ from being transported from an untrusted network/host to a trusted network/host

A

harmful traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Stateless Packet filtering filters which layers of traffic?

A

Layer 3 protocols (standard)

Layer 3 and layer 4 protocols (extended)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Stateless packet filtering can filter which two ports?

A

Can filter UDP and TCP ports?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Firewall Rules may control traffic based on/ applied that what?

A

Interface
Direction-inbound/outbound
IP addresses
Port addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are potential issues with firewall rules?

A

Erroneous rule configuration
Non-removal of stale rules
Excessively permissive
Excessively restrictive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Determine placement of firewall(s) to ______ networks and hosts of different trust levels. Include physical security

A

segregate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Packet Filtering Firewall Fundamental rules govern traffic transport based on what?

A 
Permit or deny
Source and/or destination IP address
Source and/or destination ports
Layer 4 protocol
Direction (inbound/outbound)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

On Cisco devices Packet Filtering is Implemented as _______ _______ ________

A

Access Control Entries (ACEs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AccessAccess Control Entries (ACEs) are implemented within _________ ____________ ________

A

Access Control Lists (ACLs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Standard ACLs inspects only source _______ _______

A

Standard inspects only source IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Extended ACLs inspects ______ and _______ L3 and L4 addresses plus L4 protocols

A

source and destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Packet Filtering Rules are processed in order from ????

A

top to bottom

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Access lists are attached to whatt?

A

interfaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

To reduce the load on the firewall inbound rules process prior to what?

A

routing processes

18
Q

Outbound rules are processed after what?

A

after routing process

19
Q

Can often simplify multiple inbound ACLs by

A

a single outbound ACL

20
Q

NAT translates L3 addreses between?

A

interfaces

21
Q

Changes source IP on _______ packets and destination IP on _____ packets

A

Changes source IP on outbound packets and destination IP on inbound packets

22
Q

What are the three types of NAT?

A
  • Static
  • dynamic
  • Overloading (Port address translation)
23
Q

What type of NAT manually maps a private IP to public?

A

Static Nat

24
Q

What type of NAT Automatically map private IP to public IP? Typically using a pool of available ip addresses.

A

Dynamic NAT

25
Q

What type of NAT automatically map many private IPs to one public IP?

A

Overloading | PAT

Uses ports to track individuals from many

26
Q

Inside local addresses are?

A

Actual IP address assigned to an inside host

Typically private

27
Q

Inside global addresses are?

A

Outside view IP address of inside host after translation

Typically address of router connected to ISP

28
Q

Outside local addresses are?

A

Inside view IP address of outside host after translation Only when NAT from outside to inside

29
Q

Outside global addressed are?

A

Actual IP address assigned to outside host

30
Q

NAT processed from inside to outside or vice versa

How do you configure the interfaces?

A

inside or outside
ed: ip nat inside
ip nat outside

31
Q

Interfaces have security levels which reduce need for?

A

ACLs

32
Q

Zone based firewall is contextual firewall allowing logical application of security policy through groups of ?

A

interfaces

33
Q

Zone based firewall features?

A

Application inspection (not new but easier to configure)
URL filtering
Transparent firewall (bridged rather than routed)
Supports Virtual Routing and Forwarding (VRF)

34
Q

A Zone is object consisting of one or more?

A

interfaces

May be physical or virtual

35
Q

Traffic between zones are _______ by default

A

blocked

36
Q

Zones are easily modified by adding/removing?

A

interfaces

37
Q

A ______ ______ is an object consisting of two or more zones

A

Zone pair

38
Q

What are the steps in creating zone based firewall?

A 
Create zones
Map interfaces to zones
Create zone pairs
Create class maps
Create policy maps
Apply policy maps to zone pairs with service policies
39
Q

What is ASA?

A

Adaptive Security Appliance

40
Q 
What command is used to see real live NAT translation occurring on the router?
show ip nat translation
debug ip nat
clear ip nat translations *
show ip nat statistics
A

debug ip nat

41
Q 
What command is used to clear all translations on the router?
show ip nat translation
debug ip nat
clear ip nat translations *
show ip nat statistics
A

clear ip nat translations *

42
Q 
What command is used to show the summary of NAT configuration?
show ip nat translation
debug ip nat
clear ip nat translations *
show ip nat statistics
A

show ip nat statistics

Advanced Topics (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions