Chapter 15 BB

Question 1

T/F Firewalls are usually a combination of hardware and software. Pg 529

Answer 1

True.

Question 2

What is default-deny? Pg 529

Answer 2

Only allows connections that have been specifically permitted.

Question 3

What is default-allow? When should it be used? Pg 529

Answer 3

All traffic is allowed unless it has been specifically denied. Never use this, it allows for too many inadvertent network connections and possible security breaches.

Question 4

What is a network-based firewall? Pg 530

Answer 4

Designed to protect and entire network of computers instead of just one system. Usually a combination of hardware and software.

Question 5

What is a host-based firewall? Pg 530

Answer 5

Implemented on a single machine and thus only protects that machine. Since adding additional hardware to a host is generally not preferred if it is not necessary, host-based firewalls are usually software-based.