Key Terms 7

Question 1

A highly exposed device that will most likely be targeted for attacks, and thus should be properly locked down.

Answer 1

Bastion host

Question 2

This device has two interfaces and sits between an untrusted network and trusted network to provide secure access. A multihomed device just means it has multiple interfaces. Firewalls that have multiple interfaces allow for networks to be segmented based upon security zone, with unique security configurations.

Answer 2

Dual-homed firewall

Question 3

A firewall that communicates directly with a perimeter router and the internal network. The router carries out filtering activities on the traffic before it reaches the firewall.

Answer 3

Screened host

Question 4

When two filtering devices are used to create a DMZ. The external device screens the traffic entering the DMZ network, and the internal filtering device screens the traffic before it enters the internal network.

Answer 4

Screened subnet architecture

Question 5

A firewall that runs within a virtualized environment and monitors and controls traffic as it passes through virtual machines. The firewall can be a traditional firewall running within a guest virtual machine or a component of a hypervisor.

Answer 5

Virtual firewall

Question 6

A system that acts as an intermediary for requests from clients seeking resources from other sources. A client connects to the BLANK, requesting some service, and the BLANK evaluates the request according to its filtering rules and makes the connection on behalf of the client. Proxies can be open or carry out forwarding or reverse forwarding capabilities.

Answer 6

Proxy server

Question 7

Systems that entice with the goal of protecting critical production systems. If two or more BLANK are used together, this is considered a honeynet.

Answer 7

Honeypots

Question 8

The combining of server, storage, and network capabilities into a single framework, which decreases the costs and complexity of data centers. Converged infrastructures provide the ability to pool resources, automate resource provisioning, and increase and decrease processing capacity quickly to meet the needs of dynamic computing workloads.

Answer 8

Network convergence

Question 9

The delivery of computer processing capabilities as a service rather than as a product, whereby shared resources, software, and information are provided to end users as a utility. Offerings are usually bundled as an infrastructure, platform, or software.

Answer 9

Cloud computing