Section 12 Perimeter Security

Question 1

Security devices focused on the boundary between the LAN and the WAN in your organization’s network.

Answer 1

Perimeter Security

Question 2

1. Software Based
2. Hardware Based
3. Embedded

Answer 2

Types of Firewalls

Question 3

Inspects each packet passing through the firewall and accepts or rejects it based on the rules.

Answer 3

Packet Filtering

Question 4

1. Stateless
2. Stateful

Answer 4

Types of Packet Filtering

Question 5

Filters traffic based upon the ports being utilized and type of connection (TCP or UDP).

Answer 5

NAT Filtering

Question 6

Conducts an in depth inspection based upon the application being used.

Answer 6

Application Layer Gateway

Question 7

Operates at the session layer and only inspects the traffic during the establishment of the initial session over TCP or UDP.

Answer 7

Circuit Level Gateway

Question 8

Traffic is allowed to enter or leave the network because there is an ACL rule that specifically allows it.

Answer 8

Explicit Allow

Question 9

Traffic is denied the ability to enter or leave the network because there is an ACL rule that specifically denies it.

Answer 9

Explicit Deny

Question 10

Traffic is denied the ability to enter or leave the network because there is no specific rule that allows it.

Answer 10

Implicit Deny

Question 11

Firewall installed to protect your server by inspecting traffic being sent to a web application.

Answer 11

Web Application Firewall

Question 12

1. IP Proxy
2. Caching Proxy
3. Content File
4. Web Security Gateway

Answer 12

Types of Proxy’s

Question 13

Used to secure a network by keeping its machines anonymous during web browsing.

Answer 13

IP Proxy

Question 14

Attempts to serve client requests by delivering content from itself without actually contacting the remote server.

Answer 14

Caching Proxy

Question 15

Used in organizations to prevent users from accessing prohibited websites and other content.

Answer 15

Internet Content Filter

Question 16

A go between device that scans for viruses, filters unwanted content, and performs data loss prevention functions.

Answer 16

Web Security Gateway

Question 17

A single computer (or file, group of files, or IP range) that might be attractive to an attacker.

Answer 17

Honeypot

Question 18

Attempts to detect, log, and alert on malicious network activities.

Answer 18

Network Intrusion Detection System (NIDS)

Question 19

Attempts to remove, detain, or redirect malicious traffic.

Answer 19

Network Intrusion Prevention System (NIPS)

Question 20

Combination of network security devices and technologies to provide more defense in depth within a single device.

Answer 20

Unified Threat Management