Implement Secure Access Technologies 100-160 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company has a firewall that supports both stateful inspection and application-layer filtering. The security team wants to allow HTTP traffic to a web server but also block specific malicious requests, such as SQL injection attempts. Which firewall capability should be used?

   • AStateful firewall that allows HTTP traffic and denies all other traffic
   • BApplication-layer firewall that inspects HTTP payloads for malicious patterns
   • CAn ACL that permits TCP port 80 to the web server
   • DNAC that checks the web server's compliance before allowing traffic
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company wants to allow remote employees to use VPN, but only if their devices have the latest antivirus definitions. The VPN gateway is behind a firewall. Which combination of technologies should be used to enforce this policy?

   • AAn ACL on the VPN gateway that permits only devices with specific IP addresses
   • BA packet-filtering firewall that allows only IPsec traffic from the internet
   • CNAC integrated with the VPN gateway to check endpoint compliance, and a firewall rule to allow VPN traffic
   • DA stateful firewall that blocks all traffic except VPN traffic
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary function of an Access Control List (ACL) on a network device?

   • ATo monitor network traffic and generate alerts for suspicious activity
   • BTo filter traffic based on criteria such as source/destination IP, port, and protocol
   • CTo encrypt traffic between two network devices
   • DTo authenticate users before they can access the network
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company wants to allow remote employees to securely access internal resources while also protecting the internal network from malware that might be on employee devices. The security team decides to implement a VPN. Which additional security measure should be combined with the VPN to reduce the risk of compromised devices?

   • AA stateful firewall that inspects all traffic leaving the VPN tunnel
   • BEndpoint compliance checks before VPN connection, such as requiring antivirus updates
   • CAn ACL that permits only HTTPS traffic through the VPN tunnel
   • DA firewall rule that blocks all inbound traffic on the VPN interface
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A network administrator is troubleshooting why a new ACL is not blocking traffic as expected. The ACL is applied outbound on the router's internal interface. The ACL contains the following entries: permit tcp any any eq 443, deny tcp any any eq 80, permit ip any any. Users can still access HTTP websites. What is the likely cause?

   • AThe ACL is applied outbound, but HTTP traffic is inbound
   • BThe ACL has a permit ip any any entry after the deny, which allows all traffic, including HTTP
   • CThe ACL is using TCP but HTTP uses UDP
   • DThe ACL does not have a deny ip any any at the end
   Reveal Solution Discussion Select an answer first