CH11

Question 1

Which network security zone represents the highest risk?

Internet
Intranet
Perimeter Network
Extranet

Answer 1

Internet

The Internet is considered the riskiest network security zone. Users with Internet access from anywhere in the world can attack resources placed directly on the Internet.

Question 2

What service translates Private IP Addresses to Public IP Addresses and translates Public IP Addresses back to Private?

Answer 2

Network Address Translation (NAT)

NAT is a service that can run on routers and proxy servers. It translates public and private IP addresses, reduces the number of public IP addresses needed by a company, and hides internal computers.

Question 3

An Organization wants to restrict which web pages employees can access on the Internet using Company Computers. What should be implemented?

NAT
Firewall
Proxy Server
Reverse Proxy Server

Answer 3

Proxy Server

A Proxy Server can restrict access to certain websites by using filters. The filter includes what websites are restricted and blocks them, or it includes what websites are allowed and blocks all others.

Question 4

A DMZ provides a layer of security for Internet-facing Servers?

True
False

Answer 4

True

A Perimeter Network (Also called a Demilitarized Zone or DMZ) provides a layer of security for Internet-Facing Servers.

Question 5

How many Firewalls are used to create a Perimeter Network? (Choose All That Apply)

1
2
3
4

Answer 5

1
2

Perimeter Networks can be created with 1 or 2 Firewalls. 1 Firewall is cheaper, though a perimeter network created with a single firewall can be more complex to create. Although a 3rd or 4th Firewall can technically be added to a perimeter network, they would be redundant and don’t follow perimeter network models.

Question 6

What allows computers to locate each other in a Microsoft Network?

Firewall
Public Network Location
Network Discovery
Proxy Server

Answer 6

Network Discovery

Is a Service that allows computers to discover other computers on the Network.

Question 7

You want to provide access to some internal resources to a business partner via the Internet. No one else should have access. What should you create?

Answer 7

Extranet

Provides access to Internal resources to trusted entities over the Internet.