Lesson 2

Question 1

Firewall operations are historically based on one of the following technologies

Answer 1

Packet filtering
–
Application
proxies
or
proxy servers
(not to be confused with
proxy
firewalls
)
–
Network Address Translation
–
Stateful packet inspection
–
Next
-
generation
context
-
aware firewalls

Question 2

Resides at layer 3 & 4 of the OSI Stack

.

Answer 2

Packet Filters

Question 3

________ or_________,are devices that operate as intermediary agents on behalf of clients that are on a private or protected network

Answer 3

Application proxies ,or proxy servers (typically Web proxies)

Question 4

A _________is an Internet-facing proxy used to retrieve from a wide range of sources.

Answer 4

forward proxy

Question 5

A ___________ is usually an Internet-facing proxy used as a front-end to control and protect access to a server on a private network.A reverse proxy commonly also performs tasks such as load-balancing, authentication, decryption orcaching.

Answer 5

reverse proxy

Question 6

A Stateful Packet Filtering firewall maintains state information in a state table, referred to as a _________
.

Answer 6

connection table

Question 7

Can perform stateful packet inspection as well as application layer inspection.

Answer 7

Application - level Proxy Firewall

Question 8

A _____________ is a hardware - or software - based network security system that is able to detect and block sophisticated attacks by enforcing security policies at the application level, as well as at the port and protocol level.

Answer 8

next - generation firewall (NGFW)

Question 9

___________ firewalls provide granular control of applications, comprehensive user identification, and location - based control.

Answer 9

Context - aware

Question 10

_________ to secure TCP connections

________ for authenticating telnet, HTTP, and FTP connections

Answer 10

– Sequence Number Randomization ( SNR )

– Cut - through Proxy (CTP)

Question 11

All _________ through the appliance are denied unless specifically permitted.

Answer 11

ICMP packets

Question 12

The reason is that once you configure an IP address on the appliance’s interface, the appliance automatically creates a static route for the specified network address and associates it with the configured interface. This is referred to as a ________

Answer 12

connected route