Firewalls and Security

Question 1

Enterprise management software designed to mediate access to cloud services by users across all types of devices.

Answer 1

CASB

Question 2

Functions of CASB?

Answer 2

SSO

Scan for malware

Monitor and audit user and resource activity

mitigate data exfil.

Question 3

A Layer 3 firewall technology that compares packet headers against ACLs to determine which network traffic to accept.

Answer 3

Packet Filtering

Question 4

A type of firewall that does not preserve information about the connection between two hosts. Often used to describe packet-filtering firewalls.

Answer 4

Stateless

Question 5

A technique used in firewalls to analyze packets down to the application layer rather than filtering packets only by header information, enabling the firewall to enforce tighter and more security.

Answer 5

Stateful

Question 6

A Layer 7 firewall technology that inspects packets at the Application layer of the OSI model.

Cannot examine encrypted data packets unless configured with tls inspector

Answer 6

Application Aware Firewall

Question 7

A standalone hardware device that performs only the function of a firewall, which is embedded into the appliance’s firmware.

can be deployed via routed layer 3 or bridged layer 2

Answer 7

Appliance Firewall

Question 8

Application-Based Firewall

A software application running on a single host and designed to protect only that host.

Answer 8

Host-based firewall

Question 9

Application-Based Firewall

Software designed to run on a server to protect a particular application such as a web server or SQL server.

Answer 9

Application firewall

Question 10

Application-Based Firewall

A software-based firewall running on a network server OS, such as Windows or Linux, so that the server can function as a gateway or proxy for a network segment.

Answer 10

NOS Firewall

Question 11

A server that redirects requests and responses for clients configured with the proxy address and port.

Must be configured

port 8080

Answer 11

non-transparent

Question 12

A process in which a router takes requests from the Internet for a particular application (such as HTTP) and sends them to a designated host on the LAN.

Answer 12

Destination NAT/port forwarding

Question 13

An appliance or proxy server that mediates client connections with the Internet by filtering spam and malware and enforcing access restrictions on types of sites visited, time spent, and bandwidth consumed.

Answer 13

SWG

Question 14

Host or network firewall capable of parsing application layer protocol headers and data (such as HTTP or SMTP) so that sophisticated, content-sensitive ACLs can be developed.

Answer 14

NGFW

Question 15

A firewall designed specifically to protect software running on web servers and their back-end databases from code injection and DoS attacks.

output can be written to log

Answer 15

WAF