Web Security

Front 1

Which of the following are four basic types of firewalls?

1. Screening, bastion, dual-homed, circuit level

2. Application gateway, bastion, dual-homed, screening

3. Stateful packet inspection, gateway, bastion, screening

Back 1

Anws C. Packet filtering, application gateway, circuit level, stateful packet inspection

Front 2

Which type of firewall creates a private virtual connection with the client?

1. Bastion

2. Dual-homed

3. Application gateway

4. Circuit-level gateway

Back 2

Circuit level Gateway

Front 3

1. Which type of firewall is considered the most secure?

1. Dual-homed

2. Stateful packet inspection

3. Circuit-level gateway

4. Packet screening

Back 3

B. Stateful packet inspection

Front 4

2. What four rules must be set for packet filtering firewalls?

1. Protocol type, source port, destination port, source IP

2. Protocol version, destination IP, source port, username

3. Username, password, protocol type, destination IP

4. Source IP, destination IP, username, password

Back 4

• What types of protocols to allow (FTP, SMTP, POP3, etc.)

• What source ports to allow

• What destination ports to allow

• What source IP addresses to allow (you can block certain IP

Front 5

3. What type of firewall requires individual client applications to be authorized to connect?

1. Screened gateway

2. Stateful packet inspection

3. Dual-homed

4. Application gateway

Back 5

D. Application Gateway

Front 6

4.What four rules must be set for packet filtering firewalls?

1. Protocol type, source port, destination port, source IP

2. Protocol version, destination IP, source port, username

3. Username, password, protocol type, destination IP

4. Source IP, destination IP, username, password

Back 6

Protocol type, source port, destination port, source IP

Front 7

6. Why might a proxy gateway be susceptible to a flood attack?

1. It does not properly filter packets.

2. It does not require user authentication.

3. It allows multiple simultaneous connections.

Back 7

Its authentication method takes more time and resources.

Front 8

7. Why might a circuit level gateway be inappropriate for some situations?

1. It has no user authentication.

2. It blocks Web traffic.

3. It requires client-side configuration.

4. It is simply too expensive.

Back 8

It is simply too expensive.

Front 9

8 Why is an SPI firewall less susceptible to spoofing attacks?

1. It examines the source IP of all packets.

2. It automatically blocks spoofed packets.

3. It requires user authentication.

4. It requires client application authentication.

Back 9

It automatically blocks spoofed packets.

Front 10

9. Why is an SPI firewall more resistant to flooding attacks?

1. It automatically blocks large traffic from a single IP.

2. It requires user authentication.

3. It examines each packet in the context of previous packets.

4. It examines the destination IP of all packets.

Back 10

It examines each packet in the context of previous packets.

Front 11

10 What is the greatest danger in a network host-based configuration?

1. SYN flood attacks

2. Ping flood attacks

3. IP spoofing

4. Operating system security flaws

Back 11

Operating system security flaws

Front 12

11.Which of the following is an advantage of the network host-based configuration?

1. It is resistant to IP spoofing.

2. It is inexpensive or free.

3. It is more secure.

4. It has user authentication.

Back 12

It is inexpensive or free.

Front 13

12. Which of the following can be shipped preconfigured?

1. Stateful packet inspection firewalls

2. Network host-based firewalls

3. Router-based firewalls

4. Dual-homed firewalls

Back 13

Router-based firewalls

Front 14

13. Which of the following solutions is actually a combination of firewalls?

1. Screened firewalls

2. Router-based firewalls

3. Dual-homed firewalls

4. Bastion host firewalls

Back 14

Dual-homed firewalls

Front 15

14. It should be routine for someone in the IT security staff to

1. Test the firewall by attempting a ping flood

2. Review firewall logs

3. Reboot the firewall

4. Physically inspect the firewall

Back 15

Review firewall logs

Front 16

15. What is the most important security advantage to NAT?

1. It blocks incoming ICMP packets.

2. It hides internal network addresses.

3. By default it blocks all ICMP packets.

4. By default it only allows outbound connections.

Back 16

By default it only allows outbound connections.