Information Assurance 4

Question 1

• aka network firewall.
• Used to filter traffic on a network.
• Block malicious traffic requests and data packets while allowing legitimate traffic through.

Answer 1

Firewall

Question 2

8 types of firewalls based on general structure and method

Answer 2

1. packet-filtering firewall
2. circuit-level gateway
3. stateful inspection firewall
4. application-level firewall
5. next-gen firewall
6. software firewall
7. hardware firewall
8. cloud firewall

Question 3

• oldest firewall
• designed to create checkpoints at individual routers or switches

Answer 3

packet-filtering firewall

Question 4

• quickyly and easily approve or deny traffic
• verifying transmission control protocol handshake

Answer 4

circuit-level gateway

Question 5

• combination of packet-filtering and circuit-level gateway
• offer higher level of protection of your business

Answer 5

Stateful Inspection Firewalls

Question 6

• firewalls operate at application layer to filter traffic
• cloud-based most of the time and establish traffic connections and examine data packets coming

Answer 6

Proxy Firewalls (Application-Level Gateways/Cloud Firewalls) -

Question 7

• time it was created into what makes it this kind of firewall
• also use IPS –intrusion prevention systems – to stop network attacks

Answer 7

next generation firewall

Question 8

• These are any firewalls installed on local devices.
• The biggest draw for these in that they can create a useful, in-depth defense path.
• Maintaining these on more than one device is not easy, though, so you may need more than one for each asset

Answer 8

Software firewalls

Question 9

• use physical appliances, and they act like a traffic router.
• The intercept data packets before they are connected to a network server.
• The weakness here is that they can be easily bypassed, which goes against your need for a firewall

Answer 9

Hardware Firewalls

Question 10

• also called FaaS – firewalls as a service.
• They often go hand in hand with proxy firewalls, and the most significant benefit to these is that they grow with your business.
• They work to filter large amounts of traffic away from your company, where it’s malicious

Answer 10

cloud firewall

Question 11

Models of Access Control

Answer 11

1. mandatory access control
2. discretionary access control
3. role-based access control
4. rule-based access control
5. attribute-based access control

Question 12

security model in which access rights are regulated by central authority based on multiple levels of security

Answer 12

Mandatory access control (MAC).

Question 13

access control method which owners or admins set policies defining who or what is authorized to access the resource

Answer 13

discretionary access control

Question 14

```

This is a widely used access control mechanism that restricts access to computer resources based on individuals or groups with defined business functions

Answer 14

Role-based access control (RBAC)

Question 15

This is a security model in which the system administrator defines the rules that govern access to resource objects

Answer 15

Rule-based access control.

Question 16

This is a methodology that manages access
rights by evaluating a set of rules, policies and relationships using the attributes of
users, systems and environmental condition

Answer 16

Attribute-based access control (ABAC)

Question 16

This is a widely used access control mechanism that restricts access to computer resources based on individuals or groups with defined
business functions

Answer 16

Role-based access control (RBAC)

Question 17

. This is a security model in which the system administrator defines the rules that govern access to resource objects. Often, these rules are based on conditions, such as time of day or location

Answer 17

Rule-based access control

Question 18

This is a methodology that manages access rights by evaluating a set of rules, policies and relationships using the attributes of users, systems and environmental condition

Answer 18

Attribute-based access control (ABAC).

Question 19

Is an encrypted connection over the internet from a device to a network.

Answer 19

Virtual Private Network (VPN)

Question 20

is the use of a program to screen and/or exclude to web pages or email deemed objectionable.

Answer 20

Content Filtering

Question 21

Types of Content Filtering

Answer 21

1. Web Filter
2. Email Filter
3. Internet Filter
4. Search Engine Filter
5. Proxy Content Filtering
6. DNS-based Content Filtering

Question 22

Types of VPNs

Answer 22

1. remote access
2. site-to-site

Question 23

corporate office to branch offices
over the Internet

Answer 23

Site-to-site

Question 24

VPN securely connects a device outside the corporate office

Answer 24

Remote access