Question 1

Which of the following offer internal IP address hiding and header destruction?

Accepted Answer

A)   Application proxy firewalls
B)   Unified threat management firewalls
C)   Egress firewalls
D)   Static packet filter firewallsE) C) and D)
F) None of the above

Question 2

Which of the following is NOT a typical way that attackers may avoid firewall filtering?

Accepted Answer

A)   Internal attackers
B)   Compromised internal hosts
C)   Wireless LAN hackers
D)   Border firewallsE) B) and C)
F) B) and D)

Question 3

One way to address threats for which no signature exists is to use anomaly detection.

Accepted Answer

A) True 
 B)False

Question 4

Static packet filtering has many limitations and is no longer typically used as a primary filtering mechanism.

Accepted Answer

A) True 
 B)False

Question 5

________ are high-level statements to guide firewall implementation.

Accepted Answer

A)   Firewall policies
B)   Connections
C)   Sockets
D)   Firewall policy management serversE) A) and D)
F) C) and D)

Question 6

Neither static packet filter firewalls nor application proxy firewalls examine application messages.

Accepted Answer

A) True 
 B)False

Question 7

The ________ field in a firewall policy database describes what firewalls should do with a service.

Accepted Answer

A)   action
B)   track
C)   firewalls
D)   serviceE) None of the above
F) A) and D)

Question 8

If a packet received by the firewall is not a provable attack packet, what happens?

Accepted Answer

A)   Day and time are logged in a log file.
B)   It is noted as a suspicious packet in the log file.
C)   It passes it on to its destination.
D)   It remains stored in an authentication server.E) A) and D)
F) B) and C)

Exam 6: Firewalls

The ________ field in a firewall policy database describes what firewalls should do with a service.

Correct Answer
verified

Which of the following is NOT a typical way that attackers may avoid firewall filtering?

Correct Answer
verified

One way to address threats for which no signature exists is to use anomaly detection.

Correct Answer
verified

Neither static packet filter firewalls nor application proxy firewalls examine application messages.

Correct Answer
verified

If a packet received by the firewall is not a provable attack packet, what happens?

Correct Answer
verified

________ are high-level statements to guide firewall implementation.

Correct Answer
verified

Static packet filtering has many limitations and is no longer typically used as a primary filtering mechanism.

Correct Answer
verified

Which of the following offer internal IP address hiding and header destruction?

Correct Answer
verified

Exam 6: Firewalls

The ________ field in a firewall policy database describes what firewalls should do with a service.

Correct AnswerverifiedShow Answer

Which of the following is NOT a typical way that attackers may avoid firewall filtering?

Correct AnswerverifiedShow Answer

One way to address threats for which no signature exists is to use anomaly detection.

Correct AnswerverifiedShow Answer

Neither static packet filter firewalls nor application proxy firewalls examine application messages.

Correct AnswerverifiedShow Answer

If a packet received by the firewall is not a provable attack packet, what happens?

Correct AnswerverifiedShow Answer

________ are high-level statements to guide firewall implementation.

Correct AnswerverifiedShow Answer

Static packet filtering has many limitations and is no longer typically used as a primary filtering mechanism.

Correct AnswerverifiedShow Answer

Which of the following offer internal IP address hiding and header destruction?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified