CH11 Flashcards
Which network security zone represents the highest risk?
Internet
Intranet
Perimeter Network
Extranet
Internet
The Internet is considered the riskiest network security zone. Users with Internet access from anywhere in the world can attack resources placed directly on the Internet.
What service translates Private IP Addresses to Public IP Addresses and translates Public IP Addresses back to Private?
Network Address Translation (NAT)
NAT is a service that can run on routers and proxy servers. It translates public and private IP addresses, reduces the number of public IP addresses needed by a company, and hides internal computers.
An Organization wants to restrict which web pages employees can access on the Internet using Company Computers. What should be implemented?
NAT
Firewall
Proxy Server
Reverse Proxy Server
Proxy Server
A Proxy Server can restrict access to certain websites by using filters. The filter includes what websites are restricted and blocks them, or it includes what websites are allowed and blocks all others.
A DMZ provides a layer of security for Internet-facing Servers?
True
False
True
A Perimeter Network (Also called a Demilitarized Zone or DMZ) provides a layer of security for Internet-Facing Servers.
How many Firewalls are used to create a Perimeter Network? (Choose All That Apply)
1
2
3
4
1
2
Perimeter Networks can be created with 1 or 2 Firewalls. 1 Firewall is cheaper, though a perimeter network created with a single firewall can be more complex to create. Although a 3rd or 4th Firewall can technically be added to a perimeter network, they would be redundant and don’t follow perimeter network models.
What allows computers to locate each other in a Microsoft Network?
Firewall
Public Network Location
Network Discovery
Proxy Server
Network Discovery
Is a Service that allows computers to discover other computers on the Network.
You want to provide access to some internal resources to a business partner via the Internet. No one else should have access. What should you create?
Extranet
Provides access to Internal resources to trusted entities over the Internet.