Question 1

Firewalls fall into ________ major processing-mode categories.

Accepted Answer

FIVE

Question 2

________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

Accepted Answer

PACKET-FILTERING

Question 3

The restrictions most commonly implemented in packet-filtering firewalls are based on ____.

Accepted Answer

d. All of the above

Question 4

____ filtering requires that the filtering rules governing how the firewall decides which packets are allowed and which are denied be developed and installed with the firewall.

Accepted Answer

STATIC

Question 5

____ filtering firewall can react to an emergent event and update or create rules to deal with the event.

Accepted Answer

DYNAMIC

Question 6

____ inspection firewalls keep track of each network connection between internal and external systems.

Accepted Answer

STATEFUL

Question 7

The application gateway is also known as a(n)

Accepted Answer

APPLICATION-LEVEL FIREWALL.

Question 8

The proxy server is often placed in an unsecured area of the network or is placed in the ____ zone.

Accepted Answer

DEMILITARIZED

Question 9

The ____ is an intermediate area between a trusted network and an untrusted network

Accepted Answer

DMZ

Question 10

____ firewalls are designed to operate at the media access control sublayer of the data link layer of the OSI network model.

Accepted Answer

MAC LAYER

Question 11

In recent years, the broadband router devices that can function as packetfiltering firewalls have been enhanced to combine the features of

Accepted Answer

WAPs

Question 12

Since the bastion host stands as a sole defender on the network perimeter, it is commonly referred to as the ____ host.

Accepted Answer

SACRIFICIAL

Question 13

The dominant architecture used to secure network access today is the

Accepted Answer

SCREENED subnet firewall.

Question 14

the protocol for handling TCP traffic through a proxy server.

Accepted Answer

SOCKS

Question 15

Telnet protocol packets usually go to TCP port

Accepted Answer

23

Question 16

ICMP uses port __  to request a response to a query and can be the first indicator of a malicious attack.

Accepted Answer

7

Question 17

In most common implementation models, the content filter has two components:

Accepted Answer

RATING AND FILTERING.

Question 18

____ and TACACS are systems that authenticate the credentials of users who are trying to access an organization’s network via a dial-up connection.

Accepted Answer

RADIUS

Question 19

Which of the following is a valid version of TACACS?

Accepted Answer

All of the above

Question 20

____  generates and issues session keys in Kerberos.

Accepted Answer

KDC

Question 21

Kerberos ____  provides tickets to clients who request services.

Accepted Answer

TGS

Question 22

In SESAME, the user is first authenticated to an authentication server and receives a token. The token is then presented to a privilege attribute server as proof of identity to gain a(n) ____  .

Accepted Answer

PAC

Question 23

A(n) ____  is “a private data network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures.”

Accepted Answer

VPN

Question 24

In ____  mode, the data within an IP packet is encrypted, but the header information is not.

Accepted Answer

TRANSPORT

Question 25

ISA Server can use ______________ technology.

Accepted Answer

POINT TO POINT TUNNELING PROTOCOL

Question 26

A(n) ______________ is an information security program that prevents specific types of information from moving between the outside world and the inside world.

Accepted Answer

FIREWALL

Question 27

A packet-______________ firewall installed on a TCP/IP based network typically functions at the IP level and determine whether to drop a packet or forward it to the next network connection based on the rules programmed into the firewall.

Accepted Answer

FILTERING

Question 28

Simple firewall models enfors address ______________ , which are rules designed to prohibit packets with certain addresses or partial addresses from passing through the device.

Accepted Answer

RESTRICTIONS

Question 29

The ______________ packet-filtering firewall allows only a particular packet with a particular source, destination, and port address to enter through a firewall.

Accepted Answer

DYNAMIC

Question 30

The application firewall is also known as a(n) ______________ server.

Accepted Answer

PROXY

Question 31

The circuit gateway firewall operates at the ______________ layer.

Accepted Answer

TRANSPORT

Question 32

______________ firewalls combine the elements of other types of firewalls - that is, the elements of packet filtering and proxy services, or of packet filtering and circuit gateways.

Accepted Answer

HYBRID

Question 33

The fifth generation firewalls include the ______________ proxy, a specialized form that works under Windows NT Executive, which is the kernel of Windows NT.

Accepted Answer

KERNEL

Question 34

Since the bastion host stands as the sole defender on the network perimeter, it is commonly referred to as the ______________ host.

Accepted Answer

SACRIFICIAL

Question 35

The architecture of a ______________  firewall provides a DMZ.

Accepted Answer

SCREENED SUBNET

Question 36

The general approach of the ______________  protocol is to place the filtering requirements on the individual workstation rather than on a single point of defense.

Accepted Answer

SOCKS

Question 37

The firewall device is never accessible directly from the ______________  network.

Accepted Answer

PUBLIC

"Know" box contains:
Time elapsed:
Retries:

Question

Question

Question

Q3