Chapter 7 Firewalls

Front 1

Which of the following describes an access control list (ACL)?

Back 1

A mechanism that defines traffic or an event to apply an authorization control of allow or deny against

Front 2

Which of the following is given to a notification from a firewall that a specific event or packet was detected?

Back 2

Alert

Front 3

What is anomaly-based detection?

Back 3

A form of intrusion detection system/intrusion prevention system (IDS/ IPS) based on a defined normal, often defined using rules similar to firewall rules.

Front 4

Which of the following is a technique for storing or copying log events to a centralized logging server?

Back 4

Syslog

Front 5

Which term describes a security stance that prevents all communications except those enabled by specific allow exceptions? Syslog

Back 5

Deny by default/Allow by exception

Front 6

Which of the following describes fair queuing?

Back 6

A technique of load balancing that operates by sending the next transaction to the firewall with the least current workload.

Front 7

Which of the following refers to an event that does not trigger an alarm but should have, due to the traffic or event actually being abnormal and/or malicious?

Back 7

False negative

Front 8

Which of the following is not a protection against fragmentation attacks?

Back 8

Using firewalking

Front 9

Which of the following can improve firewall performance?

Back 9

Load balancing

Front 10

Which name is given to a hacking technique used against static packet filtering firewalls to discover the rules or filters controlling inbound traffic?

Back 10

Firewalking

Front 11

Which of the following is a firewall rule that prevents internal users from accessing public FTP sites?You Answered TCP ANY ANY ANY FTP Deny

Back 11

TCP 192.168.42.0/24 ANY ANY 21 Deny

Front 12

Which of the following refers to the deployment of a firewall as an all-encompassing primary gateway security solution?

Back 12

Unified threat management (UTM)

Front 13

Which of the following hands out tasks in a repeating non-priority sequence?

Back 13

Round robin

Front 14

Which of the following is described as the maximum communication or transmission capability of a network segment?

Back 14

Wirespeed

Front 15

Unified threat management (UTM) has the advantage of managing multiple security services from a single interface.

Back 15

True

Front 16

Authentication and authorization are must be used together.

Back 16

False

Front 17

A false negative is an event that triggers an alarm when the traffic or event is abnormal and/or malicious.

Back 17

False

Front 18

Firewalking is a hacking technique used against static packet filtering firewalls to discover the rules or filters controlling inbound traffic.

Back 18

True

Front 19

Overlapping occurs when full or partial overwriting of datagram components creates new datagrams out of parts of previous datagrams.

Back 19

True

Front 20

Denial of service (DoS) attacks cannot be detected by a firewall.

Back 20

False

Front 21

asd

Back 21

asd