FIREWALLS!!!!!!!!!!!!!

Question 1

Firewalls

Answer 1

Selectively filters and blocks traffic between networks by looking at packets. Sometimes re-routes packets

Question 2

Network-based Firewall

Answer 2

Between two private networks (LAN)/between private (LAN) and public network (WAN)

Question 3

Host-based firewall

Answer 3

Software on local machine

Question 4

Stateless Inspection Packet Filtering

Answer 4

Firewall examined each packet if it was its own stand alone entity… Risky if packets are out of order

Question 5

Stateful Inspection Packet Filtering

Answer 5

Firewall has the capability to tell if a packet is part of an existing connection

Question 6

Common Firewall filters

Answer 6

deny/allow IP ranges 
source and dest ports
flags in TCP header 
Web filtering
Content Filtering

Question 7

Application Aware Firewalls

Answer 7

Operates at application layer

Question 8

Unified Threat Management

Answer 8

Strategy that combines multiple layers of security appliances and technologies into a single safety net (combo of firewalls and intrusion detection)

Question 9

*DMZ (Demilitarized Zone)

Answer 9

Network segment (or zone) that allows servers to be publicly accessible from the internet
Still have a less restrictive firewall in the front

Question 10

bastion hosts

Answer 10

host directly connected to the internet

Question 11

TCP Connect Scan

Answer 11

Completes 3-way handshake (command: nmap)

Question 12

TCP FIN Scan

Answer 12

Sends request to close nonexistent connection

Question 13

TCP Null Scan

Answer 13

No flags set, see what target machines responds back with

Question 14

TCP ACK Scan

Answer 14

Looks to see if stateless inspection is what the firewall is using

Question 15

pfSense

Answer 15

Firewall we use in lab :)

Question 16

Proxy service

Answer 16

acts as an intermediary between external and internal networks

Question 17

proxy server

Answer 17

Manages security at Application Layer

Question 18

Why do we have proxy servers?

Answer 18

To keep internal network addresses private
Cache files
Access resources from the Internet for a client machine

Question 19

Forward proxy

Answer 19

passes unmodified requests and responses. Retrieves information from web for client machines

Question 20

Reverse proxy (surrogate proxy)

Answer 20

Sits in front of web server and receives requests as if it is the web server
Caches and load balances

Question 21

keyhole

Answer 21

web proxy, http, https, ftq

Question 22

Full SSL Inspection/HTTPS Interception

Answer 22

Intercepts SSL/TLS traffic between client and server (man in the middle attack) by using a middlebox connection to web server as if it were the client

Question 23

Next-Gen Firewalls

Answer 23

enforce based on URL, SRC/DEST, User, User Group, Ports