Chapter 12- Perimeter Security

Question 1

Security devices focused on the boundry between then LAN and the WAN in your organization’s network.

Answer 1

Perimeter Security

Question 2

Inspects each packet passing through the firewall and accepts or rejects it based on the rules.

Answer 2

Packet Filtering

Question 3

Filters traffic based upon the ports being utilized and type of connection (TCP or UDP).

Answer 3

NAT Filtering

Question 4

Operates at the session layer and only inspects the traffic during the establishment of the initial session over TCP or UDP.

Answer 4

Circuit-Level gateway

Question 5

Traffic is allowed to ender or leave the network becasue there is an ACL rule that specifically allows it.

Answer 5

Explicit Allow

Question 6

Traffic is denied the ability to enter or leave the network becasue there is an ACL rule that specifically denies it.

Answer 6

Explicit Deny

Question 7

Traffic is denied the ability to enter or leave the network because there is no apecific rule that allows it.

Answer 7

Implicit Deny

Question 8

Firewall installed to protect your server by inspecting traffic being sent to a web application.

Answer 8

Web Application Firewall

Question 9

A device that acts as a middle man between a device and a remote server.

Answer 9

Proxy Server

Question 10

Used to secure a network by keeping its machines anonymous during web browsing.

Answer 10

IP Proxy

Question 11

Attempts to serve clinet requests by delivering content from itself without actually contacting the remote server.

Answer 11

Caching Proxy

Question 12

Used in organizations to prevent users from accessing prohibited websites and other content.

Answer 12

Internet Content Filter

Question 13

A go-between device that scans for viruses, filters unwanted content, and performs data loss prevention functions.

Answer 13

Web Security Gateway

Question 14

A single computer (or file, group of files, or IP range) that might be attractive to an attacker.

Answer 14

Honeypot

Question 15

A group of computers, severs, or networks used to attract an attacker.

Answer 15

Honeynet

Question 16

Systems designed to protect data by conducting content inspection of data being sent out of the network.

Answer 16

Data Loss Prevention

Question 17

Attempts to detect, log, and alert on malicious network activities.

Answer 17

Network Intrusion Detection Systems

Question 18

Attempts to remove, detain, or redirect malicious traffic.

Answer 18

Network Intrusion Prevention Systems

Question 19

Combination of network security devices and technologies to provide more defense in depth within a single device.

Answer 19

Unified Threat Management