Firewalls

Question 1

Firewalls can stop hackers from breaking into your system

Answer 1

true

Question 2

Firewalls can stop internet traffic that appears to be from a legitimate source

Answer 2

false

Question 3

Firewalls can stop viruses and worms that spread through the internet

Answer 3

true

Question 4

Firewalls can stop spyware being put on your system

Answer 4

false

Question 5

Firewalls can stop viruses and worms that are spread through email

Answer 5

false

Question 6

Lists the types of traffic authorized to pass through the firewall

Answer 6

Firewall access policy

Question 7

________ is developed from the organization’s information security risk assessment and policy, and a broad specification of which traffic types the organization needs to support

Answer 7

Firewall access policy

Question 8

Firewalls cannot protect when

____ or ____

Answer 8

Traffic that does not cross it (routing around, internal traffic)

when misconfigured

Question 9

Malware can disable:
A) Software Firewalls
B) Hardware Firewalls
C) Antivirus checkers

Answer 9

A & C

Question 10

Firewalls can stop/control
A) Pings
B) Packet sniffing
C) Outbound network traffic

Answer 10

A & C

Question 11

This type of firewall filtering makes decisions on a packet-by-packet basis

Answer 11

Packet Filtering (no state information is saved)

Question 12

________ is the simplest and most efficient type of firewall filtering

Answer 12

Packet Filtering

Question 13

What are packet filtering rules based on?

Answer 13

Information contained in the network packet

• Source IP
• Destination IP
• Source & Dest transport level address
• IP protocol field
• interface

Question 14

What are the 2 default policies of firewall packet filtering?

Answer 14

Discard (prohibit unless explicitly allowed)

Forward (permit unless explicitly forbidden) -> easier to manage, but less secure

Question 15

What are the advantages of a Packet Filtering firewall?

Answer 15

• Simplicity

* Typically transparent to users and very fast

Question 16

What are the disadvantages of a Packet Filtering firewall?

Answer 16

• Cannot protect against attacks that use application specific vulnerabilities
• Limited logging functionality
• Vulnerable to attacks and exploits that take advantage of TCP/IP
• Susceptible to security breaches caused by improper configuration

Question 17

Packet filtering countermeasure:

_____ discard packets with an inside source address if the packet arrives on an external interface

Answer 17

IP Address spoofing countermeasure

Question 18

Packet filtering countermeasure:

____ discard all packets in which the source destination specifies the route

Answer 18

Source routing attacks countermeasure

Question 19

Packet filtering countermeasure:

_____ enforcing a rule that the first fragment of a packet must contain a predefined minimum amount of the transport header

Answer 19

Tiny fragment attack countermeasure

Question 20

Packet Filtering

In order for a fragmented packet to be successfully reassembled at the destination, each fragment must obey the following rules:

A) Must not share a common fragment identification number

B) Each fragment must say what place or offset is in the original unfragmented packet

C) Each fragment must tell the length of the data carried in the fragment

D) The fragment does not need to know whether more fragments follow this one

Answer 20

B & C

Question 21

a _______ firewall uses a connection state table

Answer 21

stateful inspection firewall

Question 22

______ acts as a relay of application level traffic (basically a man or system in the middle)

Answer 22

Application-level gateway (or application proxy)

Question 23

Application level gateways tend to be more secure than packet filters

Answer 23

true

Question 24

Application level gateways may restrict application features supported

Answer 24

true

Question 25

An Application level gateway can generically filter traffic for any application

Answer 25

False; must have proxy code for specific applications

Question 26

A packet filtering firewall is typically configured to filter packets going in both directions

Answer 26

true

Question 27

A prime disadvantage of an application-level gateway is the additional processing overhead on each connection

Answer 27

true

Question 28

A packet filtering firewall can decide if the current packet is allowed based on another packet it has just examined

Answer 28

false

Question 29

A stateful inspection firewall needs to keep track of information of an active connection in order to decide on the current packet

Answer 29

true

Question 30

A _______ serves as a platform for an application-level gateway, and is a system identified as a critical strong point in the network’s securty

Answer 30

bastion host

Question 31

__________ firewalls are used to secure an individual host

Answer 31

host based firewalls

Question 32

The primary role of a personal firewall is to ___________

Answer 32

deny unauthorized remote access

Question 33

______ hides the system from the internet by dropping unsolicited communication packets

Answer 33

stealth mode

Question 34

A company has a conventional firewall in place on its network. Which (if any) of these situations requires an additional personal firewall:

A) An employee uses a laptop on the company network and at home

B) An employee uses a desktop on the company network to access websites worldwide

C) A remote employee uses a desktop to create a VPN on the company’s secure network

D) None of the above, in each case the employee’s computer is protected by the company firewall

Answer 34

A & C

Question 35

Typically the systems in the _____ require or foster external connectivity such as the corporate web site, an e-mail server, or a DNS server

A) DMZ
B) IP protocol field
C) boundary firewall
D) VPN

Answer 35

A) DMZ

Question 36

A _______ configuration involves stand-alone firewall devices plus host-based firewalls working together under a central administrative control

A) packet filtering firewall
B) distributed firewall
C) Boundary firewall
D) VPN

Answer 36

B) distributed firewall