Firewall Technologies, Architectures, and Best Practices NDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which firewall type operates at the application layer and can inspect the content of specific protocols, such as HTTP or FTP?

   • ANext-generation firewall
   • BPacket-filtering firewall
   • CStateful inspection firewall
   • DApplication-level proxy firewall
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization wants to protect its internal network from both external threats and threats originating from the DMZ. They have two firewalls available. Which architecture should they use?

   • ADual-homed host: use one firewall with three interfaces for internet, DMZ, and internal network.
   • BMulti-homed host: connect both firewalls in series with the internal network directly behind the first firewall.
   • CSingle firewall with DMZ on a separate interface, and the internal network on another interface.
   • DScreened subnet: place the DMZ between the two firewalls, with the internal network behind the second firewall.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is typically NOT a component of a firewall rule?

   • ASource IP address
   • BDestination port
   • CData payload content
   • DProtocol type
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common limitation of traditional packet-filtering firewalls?

   • AThey cannot block traffic on specific ports
   • BThey cannot log traffic
   • CThey cannot inspect the payload of packets
   • DThey cannot filter based on IP addresses
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary function of a firewall in network security?

   • ATo filter traffic based on a defined set of security rules
   • BTo encrypt all traffic passing between networks
   • CTo detect and block malware inside allowed traffic
   • DTo authenticate users before they access the network
   Reveal Solution Discussion Select an answer first