Windows Firewall with Advanced Security( Comptia Objective 1.5)

Question 1

What is a Stateful Firewall?

Answer 1

• Is one that understands and remembers the state of traffic that flows through it.
• For example the firewall will remember that traffic flowed out of a system to a specified destination, the firewall then knows to allow incoming traffic to flow through it and back to the user. However if incoming traffic attempts to come through to the user when they did not first establish a state via outbound traffic the firewall will block the traffic.

Question 2

The Windows firewall is now known as?

Answer 2

• Windows( Defender) Firewall.
• Implemented with the invent of Windows 7.
• Integrated into the operating system.
• Can find configuration under the windows control panel/ Windows Firewall. Additional configuration settings can be found the “ Advanced Settings” section of the Windows firewall settings.

Question 3

What is the basic functionality of the Windows firewall?

Answer 3

• To allow some applications to send and receive traffic. And to block others.
• This can be achieved by setting fundamental firewall rules.
• Applications that are set to allow traffic to be sent and received can be set in the “ Allowed apps” section of the Windows Firewall/Defender
• You will not have detailed control, no scope. All or nothing either an app can send or receive data or it can’t do either.

Question 4

If you wanted to be able to set more detailed control of your Windows Firewall what would you use to achieve this?

Answer 4

• Windows Firewall with Advanced Security
• This allows you to set inbound rules, outbound rules as well as security rules for encryption.
• Can also set granular rules where you can specifiy the program, the port number to be used as well as predefined services and custom variables as well.
• Custom variables include things such as Program, protocol/port, scope, action and profile that will be included for this rule.

Question 5

Where can you find these advanced features of the Windows firewall?

Answer 5

• Under Windows Firewall settings> Advanced Settings
• This will bring up another window which allow you to set inbound and outbound rules for the firewall. As well as Connection security rules and monitoring as well.
• You will likely already see a list of rules in place and you can change them simply by clicking on the rule and editing it’s properties.