Module 15 - Firewall technologies

Question 1

What system enforces an access control policy between networks?

Answer 1

Firewalls

Question 2

Which firewall maintains connection state information in a table to track sessions?

Answer 2

Stateful firewall

Question 2

Which firewall uses a simple policy table to filter traffic based on fixed rules?

Answer 2

Stateless firewall

Question 3

Which firewall type filters based only on Layer 3 and Layer 4 information?

Answer 3

A Packet filtering (Stateless) firewall

Question 3

What performance issue may firewalls introduce?

Answer 3

Slow network

Question 4

At which OSI layers does a stateful firewall analyze traffic?

Answer 4

OSI Layer 4 (Transport) and Layer 5 (Session)

Question 5

Which firewall type is the most commonly used and versatile?

Answer 5

Stateful firewall

Question 6

What type of server does a client connect to when using an application gateway firewall?

Answer 6

A proxy server

Question 6

Which firewall filters traffic at Layers 3, 4, 5, and 7 and acts on behalf of the client?

Answer 6

Application Gateway Firewall (Proxy firewall)

Question 6

Which firewall filters traffic between two bridged interfaces without routing it?

Answer 6

Transparent Firewall

Question 7

Which type of firewall goes beyond stateful filtering to provide integrated intrusion prevention?

Answer 7

The NGFW (Next generation firewall)

Question 8

Which firewall type addresses evolving security threats with modern techniques?

Answer 8

NGFW (Next Generation Firewall)

Question 8

Which firewall type includes application awareness and control to block risky apps?

Answer 8

NGFW (Next generation Firewall)

Question 9

Which firewall type uses Layer 3 and Layer 4 information to permit or deny traffic?

Answer 9

Packet filtering firewall (Stateless)

Question 10

Which firewall type offers low impact on network performance due to its simplicity?

Answer 10

Packet filtering firewall (Stateless)

Question 10

Which firewall type is often used as the primary defense mechanism against unwanted traffic?

Answer 10

Stateful firewall

Question 10

Which firewall type provides an initial layer of security at the network layer?

Answer 10

Stateless firewall (Packet filtering)

Question 11

Which default port can a packet filtering firewall block to prevent SMTP virus broadcasting?

Answer 11

Port 25

Question 12

What is the untrusted network in a basic firewall configuration referred to as?

Answer 12

A public network

Question 12

What is the trusted network in a basic firewall design called?

Answer 12

A private network

Question 13

What happens to unsolicited traffic originating from the public network in a basic firewall design?

Answer 13

It is blocked

Question 14

Which firewall design includes an additional interface used to separate public services from the internal network?

Answer 14

A DMZ (Demilitarized Zone)

Question 15

In a typical two-interface firewall, what kind of traffic is permitted and inspected?

Answer 15

Traffic from the private to the public network

Question 16

In a DMZ setup, what happens to traffic from the private network to the public or DMZ networks?

Answer 16

It is permitted

Question 17

What happens to traffic from the DMZ to the private network?

Answer 17

It is usually blocked

Question 18

Which firewall type groups interfaces into zones based on similar features?

Answer 18

ZPF (Zone Based Policy Firewalls)

Question 18

What is the default rule for traffic between different zones in a ZPF?

Answer 18

Zone to zone traffic is blocked unless permitted by a policy

Question 19

What is the traffic policy between interfaces in the same zone?

Answer 19

Traffic passed freely

Question 20

Which special zone in a ZPF includes all router interface IP addresses?

Answer 20

A Router self zone

Question 21

What term describes the use of multiple layers of firewall defenses in an organization?

Answer 21

Layered defence

Question 22

Which firewall design uses a packet filter, screened host, and interior screening router in a DMZ?

Answer 22

A screened subnet configuration

Question 23

What is a bastion host and where is it usually placed?

Answer 23

A Hardened computer placed in the DMZ

Question 24

Which layer defines and enforces zone boundaries?

Answer 24

Perimeter security

Question 24

Which layer in a layered defense secures the core infrastructure against malware and traffic anomalies?

Answer 24

Network core security

Question 25

Which layer ensures endpoint identity and policy compliance?

Answer 25

Endpoint security

Question 25

Which layer ensures the protection of data during transfer?

Answer 25

Communications security

Question 26

What are some key best practices for firewall security policy?

Answer 26

Deny all by default, permit needed services