Question 1

An attacker who suspects that an organization has dial-up lines can use a device called a(n) war dialer to locate the connection points. _________________________

Accepted Answer

A war dialer is a tool that dials a range of phone numbers, identifying any that are answered by a modem. This allows an attacker to find potential entry points into an organization's network, including dial-up lines.

Question 2

SESAME, as described in RFC 4120, keeps a database containing the private keys of clients and servers-in the case of a client, this key is simply the client's encrypted password. _________________________

Accepted Answer

Kerberos

Question 3

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.
A)Packet-filtering
B)Application gateway
C)Circuit gateway
D)MAC layer

Accepted Answer

Packet-filtering firewalls are designed to inspect packet headers and determine whether to pass or block traffic based on header information such as source address, destination address, packet type, and port number. Application gateways and circuit gateways offer greater security but also require more processing power and can be more difficult to configure. MAC layer firewalls operate at the data link layer and are not typically used for network security.

Question 4

Kerberos uses asymmetric key encryption to validate an individual user to various network resources. _________________________

Accepted Answer

symmetric

Question 5

Traceroute, formally known as an ICMP Echo request, is used by internal systems administrators to ensure that clients and servers can communicate. _________________________

Accepted Answer

Pings, Ping

Question 6

The presence of external requests for Telnet services can indicate a potential attack. _________________________

Accepted Answer

Telnet is a protocol that permits users to connect to remote computers and login as if they were sitting at the local device. The use of Telnet for remote access to a computer network exposes the network to several security risks. Attackers could potentially use Telnet service to gain access to a system and cause harm by sending malicious commands, launching a Denial of Service (DoS) attack or stealing sensitive information. Hence, the presence of external requests for Telnet services could indicate a potential attack, making option A true.

Question 7

__________ access control is a form of __________ access control in which users are assigned a matrix of authorizations for particular areas of access.
A)lattice-based, discretionary
B)arbor-based, nondiscretionary
C)arbor-based, discretionary
D)lattice-based, nondiscretionary

Accepted Answer

Lattice-based access control is a form of nondiscretionary access control where users are assigned a matrix of authorizations, ensuring a structured and hierarchical approach to access permissions.

Question 8

Best practices in firewall rule set configuration state that the firewall device never allows administrative access directly from the public network. _________________________

Accepted Answer

It is a best practice to always restrict administrative access to the firewall device to only trusted, internal networks and not allow it to be accessible directly from the public network. This helps minimize the risk of unauthorized access or exploitation of vulnerabilities in the firewall device.

Question 9

When Web services are offered outside the firewall, SMTP traffic should be blocked from internal networks through the use of some form of proxy access or DMZ architecture. _________________________

Accepted Answer

HTTP

Question 10

Which of the following is not a major processing mode category for firewalls?
A)Packet-filtering firewalls
B)Application gateways
C)Circuit gateways ​
D)Router passthru

Accepted Answer

Router passthru is not a major processing mode category for firewalls. The other three options, packet-filtering firewalls, application gateways, and circuit gateways, are all major processing mode categories for firewalls.

Question 11

A(n) intranet ​is a segment of the DMZ where additional authentication and authorization controls are put into place to provide services that are not available to the general public. _________________________

Accepted Answer

extranet

Question 12

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.
A)dynamic
B)static
C)stateful
D)stateless

Accepted Answer

A dynamic filtering firewall has the ability to react to emergent events and update or create rules to deal with the event. Static firewalls, on the other hand, use pre-configured rules that do not change based on emerging events. Stateful firewalls maintain records of the state of connections and can make more informed decisions about what to allow or block, but do not necessarily have the ability to dynamically create or update rules in response to events. Stateless firewalls do not maintain any connection state information and make decisions based solely on the contents of individual packets.

Question 13

The popular use for tunnel mode VPNs is the end-to-end transport of encrypted data. _________________________

Accepted Answer

transportMultiple Choice

Question 14

Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped. _________________________

Accepted Answer

Most firewalls analyze packet header information such as source and destination IP addresses, port numbers, and protocol type to make decisions about whether to allow or block traffic.

Question 15

__________ filtering requires that the firewall's filtering rules for allowing and denying packets are developed and installed with the firewall.
A)Dynamic
B)Static
C)Stateful
D)Stateless

Accepted Answer

Static filtering involves setting up predefined rules in a firewall that determine which packets are allowed or denied. These rules do not change dynamically and must be configured directly in the firewall settings.

Question 16

Firewalls operate by examining a data packet and performing a comparison with some predetermined logical rules. _________________________

Accepted Answer

Firewalls use predefined rules to analyze the packet headers and determine whether to allow or block the traffic. If the packet matches the rules, it is allowed through, and if it does not match, it is blocked.

Question 17

In order to keep the Web server inside the internal network, direct all HTTP requests to the internal filtering firewall and configure the internal filtering router/firewall to allow only that device to access the internal Web server. _________________________

Accepted Answer

proxy server, proxy

Question 18

The filtering component of a content filter is like a set of firewall rules for Web sites, and is common in residential content filters. _________________________

Accepted Answer

rating

Question 19

Secure VPNs use security protocols and encrypt traffic transmitted across unsecured public networks like the Internet. _________________________

Accepted Answer

This is true. Secure VPNs use protocols like OpenVPN, IPSec, and others to encrypt data transmitted over public networks.

Question 20

The restrictions most commonly implemented in packet-filtering firewalls are based on __________.
A)IP source and destination address
B)Direction (inbound or outbound)
C)TCP or UDP source and destination port requests
D)All of the above

Accepted Answer

Packet-filtering firewalls commonly implement restrictions based on IP source and destination address, direction (inbound or outbound), and TCP or UDP source and destination port requests. Therefore, the best answer is D, which includes all of the above.

Quiz 6: Security Technology: Access Controls, Firewalls, and Vpns

An attacker who suspects that an organization has dial-up lines can use a device called a(n) war dialer to locate the connection points. _________________________

SESAME, as described in RFC 4120, keeps a database containing the private keys of clients and servers-in the case of a client, this key is simply the client's encrypted password. _________________________

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

Kerberos uses asymmetric key encryption to validate an individual user to various network resources. _________________________

Traceroute, formally known as an ICMP Echo request, is used by internal systems administrators to ensure that clients and servers can communicate. _________________________

The presence of external requests for Telnet services can indicate a potential attack. _________________________

access control is a form of access control in which users are assigned a matrix of authorizations for particular areas of access.

Best practices in firewall rule set configuration state that the firewall device never allows administrative access directly from the public network. _________________________

When Web services are offered outside the firewall, SMTP traffic should be blocked from internal networks through the use of some form of proxy access or DMZ architecture. _________________________

Which of the following is not a major processing mode category for firewalls?

A(n) intranet is a segment of the DMZ where additional authentication and authorization controls are put into place to provide services that are not available to the general public. _________________________

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

The popular use for tunnel mode VPNs is the end-to-end transport of encrypted data. _________________________

Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped. _________________________

__________ filtering requires that the firewall's filtering rules for allowing and denying packets are developed and installed with the firewall.

Firewalls operate by examining a data packet and performing a comparison with some predetermined logical rules. _________________________

In order to keep the Web server inside the internal network, direct all HTTP requests to the internal filtering firewall and configure the internal filtering router/firewall to allow only that device to access the internal Web server. _________________________

The filtering component of a content filter is like a set of firewall rules for Web sites, and is common in residential content filters. _________________________

Secure VPNs use security protocols and encrypt traffic transmitted across unsecured public networks like the Internet. _________________________

The restrictions most commonly implemented in packet-filtering firewalls are based on __________.

Quiz 6: Security Technology: Access Controls, Firewalls, and Vpns

An attacker who suspects that an organization has dial-up lines can use a device called a(n) war dialer to locate the connection points. _________________________

SESAME, as described in RFC 4120, keeps a database containing the private keys of clients and servers-in the case of a client, this key is simply the client's encrypted password. _________________________

__________ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.

Kerberos uses asymmetric key encryption to validate an individual user to various network resources. _________________________

Traceroute, formally known as an ICMP Echo request, is used by internal systems administrators to ensure that clients and servers can communicate. _________________________

The presence of external requests for Telnet services can indicate a potential attack. _________________________

__________ access control is a form of __________ access control in which users are assigned a matrix of authorizations for particular areas of access.

Best practices in firewall rule set configuration state that the firewall device never allows administrative access directly from the public network. _________________________

When Web services are offered outside the firewall, SMTP traffic should be blocked from internal networks through the use of some form of proxy access or DMZ architecture. _________________________

Which of the following is not a major processing mode category for firewalls?

A(n) intranet ​is a segment of the DMZ where additional authentication and authorization controls are put into place to provide services that are not available to the general public. _________________________

A __________ filtering firewall can react to an emergent event and update or create rules to deal with the event.

The popular use for tunnel mode VPNs is the end-to-end transport of encrypted data. _________________________

Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped. _________________________

__________ filtering requires that the firewall's filtering rules for allowing and denying packets are developed and installed with the firewall.

Firewalls operate by examining a data packet and performing a comparison with some predetermined logical rules. _________________________

In order to keep the Web server inside the internal network, direct all HTTP requests to the internal filtering firewall and configure the internal filtering router/firewall to allow only that device to access the internal Web server. _________________________

The filtering component of a content filter is like a set of firewall rules for Web sites, and is common in residential content filters. _________________________

Secure VPNs use security protocols and encrypt traffic transmitted across unsecured public networks like the Internet. _________________________

The restrictions most commonly implemented in packet-filtering firewalls are based on __________.

access control is a form of access control in which users are assigned a matrix of authorizations for particular areas of access.

A(n) intranet is a segment of the DMZ where additional authentication and authorization controls are put into place to provide services that are not available to the general public. _________________________