Lesson 11: Network Security Devices

Question 1

What might cause proxy settings to be reconfigured without user interaction?

Answer 1

Malware/ spyware

Question 2

How can you access windows firewall?

Answer 2

Control panel - System and Security

Question 3

What would you use to configure a port-based rule in Windows 7?

Answer 3

Firewall advanced settings

Question 4

What is the port number for remote desktop protocol?

Answer 4

3389

Question 5

How will a user know whether the Windows Firewall is disabled on Windows 7?

Answer 5

The bottom right hand side will tell you with a notification, a flag with a X if its windows 7

Question 6

What is used to allow internet access to an internal web server through a firewall?

Answer 6

Port forwarding

Question 7

What is a DoS?

Answer 7

Denial of Service. Is an attack from one computer to another. The goal is to disrupt the normal operation so that the computer can’t provide service to users.

Question 8

What is a DDoS?

Answer 8

Distributed denial of Service. This is a DoS attack from multiple attackers at once. Botnets are frequently used to attack targets with thouzands of zombie computers.

Question 9

What is a Network-based firewall?

Answer 9

Controls traffic allowed in or out of the network. This can be a dedicated appliance that’s acts as only a firewall or it can be another device such as a router that has firewall capabilities.

Question 10

What is a Host-based firewall?

Answer 10

This is a software running on a computer or host. Windows based systems has the windows firewall, which is a control panel applet running in windows and many third party applications are also available.

Question 11

What is a DMZ?

Answer 11

Demilitarized zone. Is a buffer zone that provides a layer of security protection. Most commonly used for Internet facing servers and normally uses 2 firewalls. Buffer zones are placed between the Internet and the internal network so there is no risk.

Question 12

What is Port Forwarding?

Answer 12

Supported with routers and firewalls. This allows traffic from the Internet to be forwarded to an internal system. Without port forwarding clients can’t access this internal system.

Question 13

What is Port Triggering?

Answer 13

Used to open an incoming port in response to traffic on an outgoing port. The incoming port is normally closed and will close again a short while after the session is closed.

Question 14

What are Proxy servers?

Answer 14

Used in many networks to control Internet traffic. Commonly used with HTTP and HTTPS( Hypertext transfer protocol secure) but can be used with other protocols such as FTP ( File transfer protocol)

Question 15

What is a QoS?

Answer 15

Quality of Service. You use rules but associate it with QoS. Then assign either a bandwidth for the traffic or priority. E.g when VoIP is not clear there isn’t enough bandwidth. When using it you would give VoIP a higher priority to minimize this problem.

Question 16

What is a Netsh?

Answer 16

A shell command that has multiple layers.

Question 17

What is a firewall?

Answer 17

A firewall controls what traffic is allowed into or out of a network.

Question 18

How does Proxy server content filtering work?

Answer 18

It filters traffic based on URLs and blocks access to malicious websites.

Question 19

What is Malicious software ( malware) filtering?

Answer 19

Filters all traffic and detects and blocks malicious software.

Question 20

What does Spam filtering do?

Answer 20

Ability to detect and block spams before it reaches the user.

Question 21

What are IDSs (Intrusion Detection Systems)?

Answer 21

Monitor traffic and detects attacks and includes a notification system to provide alerts when an attack is detected.

Question 22

What are IPSs(Intrusion Prevention Systems)?

Answer 22

Extension of IDSs and can prevent attacks placed in line with traffic to block malicious traffic before it reaches the network.

Question 23

What is a NAC?

Answer 23

Network Access Control. Clients are inspected to ensure they meet certain requirements before access is granted. E.g a VPN client will be inspected to ensure it has up-to-date antivirus software before it is granted full VPN access.