Quiz 10 Flashcards
A DMZ is .
Question 1 options:
a semi-trusted network
a trusted network
an untrusted network
not actually a network
a semi-trusted network
A screening router would be an appropriate choice for meeting the security needs of
a .
Question 2 options:
DMZ
none of the above
small office network
home network
none of the above.
Which of the following computers is likely to be found in a DMZ? (Choose all that apply.)
Question 3 options:
A) domain controller
B) e-mail server
C) customer information database
D) Web server
B) e-mail server
D) Web server
Which of the following issues should you consider in firewall design? (Choose all that apply.)
Question 4 options:
A) authorization
B) fault tolerance
C) log size
D) load balancing
B) fault tolerance
D) load balancing
A proxy server . (Choose all that apply.)
Question 5 options:
A) uses fewer system resources than a software firewall
B) can filter Application layer content
C) is the same as a reverse firewall
D) is designed to improve Web access
B) can filter Application layer content
D) is designed to improve Web access
What enables servers in a server farm to work together to handle requests?
Question 7 options:
a router
a switch
load-balancing software
a networking hub
load-balancing software
What is the main problem with using a screening router?
Question 6 options:
The router alone cannot stop many types of attacks.
The router cannot be used with a firewall.
The router might not provide an adequate screen.
The router can be configured incorrectly.
The router alone cannot stop many types of attacks.
For which of the following reasons would you consider creating a protected subnet
within an already protected internal network? (Choose all that apply.)
Question 8 options:
A) to protect Web servers
B) to protect the company’s reputation
C) to protect customer information
D) to protect management servers
A) to protect Web servers
C) to protect customer information
D) to protect management servers
Which of the following functions can a bastion host perform? (Choose all that apply.)
Question 10 options:
A) FTP server
B) e-mail server
C) domain controller
D) security management server
A) FTP server
B) e-mail server
A corporation with several branch offices has decided to maintain multiple firewalls,
one to protect each branch office’s network. What is the most efficient way to maintain
these firewalls?
Question 9 options:
Send information about the security policy to each network administrator.
Set up remote desktop management software.
Use a centralized security workstation.
Broadcast configuration instructions periodically by e-mail.
Use a centralized security workstation.
Which of the following can hide internal IP addresses from the Internet? (Choose all that apply.)
Question 11 options:
A) state tables
B) packet filters
C) proxy servers
D) NAT
C) proxy servers
D) NAT
Hardening a bastion host involves which of the following measures?
Question 12 options:
installing current patches
disabling unnecessary services
all of the above
removing unnecessary accounts
all of the above
To isolate all external Web requests to a specific Web server on the DMZ, it would be
best to use many-to-one NAT.
Question 13 options:
True
False
False
A bastion host is usually located on the internal network.
Question 14 options:
True
False
False
In a Cisco ASA 5505 firewall, security level 100 is the least secure level.
Question 15 options:
True
False
False
