L11 - Firewalls

Question 1

A firewall can stop hackers from breaking into your system

a) True
b) False

Answer 1

a) True

Question 2

A firewall can stop internet traffic that appears to be from a legitimate source

a) True
b) False

Answer 2

b) False

Firewalls are designed to allow traffic from legitimate sources

Question 3

A firewall can stop viruses and worms that spread through the internet

a) True
b) False

Answer 3

a) True

Firewalls can use virus and worm traffic from previous knowledge (high traffic)

Question 4

A firewall can stop spyware being put on your system

a) True
b) False

Answer 4

b) False

This is hard to stop because spyware can steal info and send it to a legitimate-looking site (not known to be malicious) and has low traffic

Question 5

A firewall can stop viruses and worms that are spread through email

a) True
b) False

Answer 5

b) False

Firewalls can’t check contents of email itself

Question 6

Malware can disable Software Firewalls

a) True
b) False

Answer 6

a) True

If malware can get into OS, it will have privilege to disable software

Question 7

Malware can disable Hardware Firewalls

a) True
b) False

Answer 7

b) False

Malware cannot control hardware settings

Question 8

Malware can disable Antivirus checkers

a) True
b) False

Answer 8

a) True

If malware can get into OS, it will have privilege to disable software

Question 9

Firewalls can stop/control Pings

a) True
b) False

Answer 9

a) True

Firewall can look at the IP header block it

Question 10

Firewalls can stop/control Packet Sniffing

a) True
b) False

Answer 10

b) False

At this point, the malware is already in the network

Question 11

Firewalls can stop/control Outbound network traffic

a) True
b) False

Answer 11

a) True

Question 12

In order for a fragmented packet to be successfully reassembled at the destination, each fragment must not share a common fragment identification number

a) True
b) False

Answer 12

b) False

Each fragment of the same IP packet must share the same identification number

Question 13

In order for a fragmented packet to be successfully reassembled at the destination, each fragment must say what its place or offset is in the original unfragmented packet

a) True
b) False

Answer 13

a) True

Otherwise we cannot correctly reassemble the fragments into the original IP packet

Question 14

In order for a fragmented packet to be successfully reassembled at the destination, each fragment must tell the length of the data carried in the fragment

a) True
b) False

Answer 14

a) True

This helps correctly reassemble the fragments into the original IP packet

Question 15

In order for a fragmented packet to be successfully reassembled at the destination, each fragment does not need to know whether more fragments follow this one

a) True
b) False

Answer 15

b) False

Each fragment must know if there are more fragments to follow

Question 16

A packet filtering firewall is typically configured to filter packets going in both directions

a) True
b) False

Answer 16

a) True

Question 17

A prime disadvantage of an application-level gateway is the additional processing overhead on each connection

a) True
b) False

Answer 17

a) True

Question 18

A packet filtering firewall can decide if the current packet is allowed based on another packet that it has just examined

a) True
b) False

Answer 18

b) False

Question 19

A stateful inspection firewall needs to keep track of information of an active connection in order to decide on the current packet

a) True
b) False

Answer 19

a) True

Question 20

A company has a conventional firewall in place on its network. Which of these situations requires an additional personal firewall?

a) An employee uses a laptop on the company network and at home
b) An employee uses a desktop on the company network to access websites worldwide
c) A remote employee uses a desktop to create a VPN on the company’s secure network
d) None of the above, in each case the employee’s computer is protected by the company firewall

Answer 20

A and C

a) An employee uses a laptop on the company network and at home
c) A remote employee uses a desktop to create a VPN on the company’s secure network

Question 21

Typically the systems in the _____ require or foster external connectivity such as a corporate website, and email server, or a DNS server

a) DMZ
b) IP protocol field
c) Boundary firewall
d) VPN

Answer 21

a) DMZ

Question 22

A ____ configuration involves stand-alone firewall devices plus host-based firewalls working together under a central administrative control

a) packet filtering firewall
b) distributed firewall
c) boundary firewall
d) VPN

Answer 22

b) distributed firewall