Networking 3/4 Chapter 6 Test Review

Which of the following is true about a firewall?

• You must manually specify which traffic you want to allow through the firewall. Everything else is blocked.

• Firewalls protect against email spoofing attacks.

• Host-based firewalls and network-based firewalls can be installed separately, but they cannot be placed together to provide multiple layers of protection.

• Implicit deny is used to deny permissions to a specific user even when the rest of the user's group is allowed access.

Which of the following combines several layers of security services and network functions into one piece of hardware?

• Firewall

• Circuit-level gateway

• Unified Threat Management (UTM)

• Intrusion detection system (IDS)

How does a proxy server differ from a packet-filtering firewall?

• A proxy server includes filters for the session ID as well as the IP address and port number.

• A proxy server operates at the Application layer, while a packet-filtering firewall operates at the Network layer.

• A proxy server is used to create a screened subnet, while a packet-filtering firewall can only be used with screened subnets.

• A proxy server can prevent unknown network attacks, while a packet-filtering firewall can only prevent known attacks.

You have been given a laptop to use for work. You connect the laptop to your company network, use the laptop from home, and use it while traveling. You want to protect the laptop from internet-based attacks. Which solution should you use?

• Network-based firewall

• VPN concentrator

• Host-based firewall

• Proxy server

Which of the following is another name for a firewall that performs router functions?

• Screening router

• Screened subnet

• Screened-host gateway

• Dual-homed gateway

You have used firewalls to create a screened subnet. You have a web server that needs to be accessible to internet users. The web server must communicate with a database server to retrieve product, customer, and order information. How should you place devices on the network to best protect the servers? (Select two.)

• Put the web server on the private network.

• Put the database server outside the screened subnet.

• Put the web server inside the screened subnet.

• Put the database server inside the screened subnet.

• Put the database server on the private network.

Which of the following does the sudo iptables -F command accomplish?

• Saves changes to iptables.

• Drops all incoming traffic.

• Clears all the current rules.

• Lists all the current rules.

What do you need to configure on a firewall to allow traffic directed to the public resources on the screened subnet?

• Packet filters

• FTP

• Subnet

• VPN

You've just installed a new network-based IDS system that uses signature recognition. What should you do on a regular basis?

• Modify clipping levels.

• Update the signature files.

• Generate a new baseline.

• Check for backdoors.

Which IDS method defines a baseline of normal network traffic and then looks for anything that falls outside of that baseline?

• Misuse detection

• Pattern matching

• Dictionary recognition

• Anomaly-based