CHAPTER 15 PHYSICAL SECURITY AND RISK Flashcards
Most firewalls in use today implement something called what?P534
Demilitarized zone
A standard DMZ setup typically has three or four network cards in the firewall computer?P534T/F
False
A DMZ is not a device you buy at the store and just connect turn and forget- you need to permit and deny the ports you want?P534T/F
True
What protect data on the inside of a firewall?P534
Protocol switching
What are two ways to implement protocol switching?P534-535
bullet points on P 535
What port does TCP use?P536
23
What port does UDP use?P536
FTP
What does figure 15.4 demonstrates?P536
That any TCP/IP packets coming in from the internet can’t pass through into the local network because of the difference in the protocols used by each network.
What has the ability of a router or a firewall to discard packets that don’t meet the right criteria/p537
Packet filtering
Do you need a firewall to guard against attacks on your network’s access point and protocol switching device?P537T/F
true
You are trying to login and gain access to a communication session and you wont be able to do so because of what?P538
A firewall is using dynamic packet filtering with a dynamic state list because the data they send isn’t part of a current valid session.
What does figure 15.5 depict?P538
It is a failed attempt to infiltrate a network protected with a dynamic state list.
Firewalls can also implement something called?P538
proxy services
Proxies make good firewalls?P539T/F
True
Does proxy hide the IP addresses of all the device on the internal network by exchanging its IP address for the address of any requesting station?P539T/F
true