Firewall Technologies, Architectures, and Best Practices NDE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When creating a firewall rule to allow web traffic, which destination port is typically used for HTTPS?

   • A80
   • B22
   • C25
   • D443
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to block employees from using a specific social media application that uses both HTTP and HTTPS and can tunnel through other ports. Which firewall type is most effective for this requirement?

   • ANext-generation firewall (NGFW) with application awareness and identity-based policies.
   • BStateful inspection firewall with rules for known ports.
   • CApplication-level gateway (proxy) that requires manual configuration for each application.
   • DPacket-filtering firewall with rules for the application's known IP addresses.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security analyst is troubleshooting a firewall that is dropping legitimate traffic. The firewall logs show that the traffic is being denied by the implicit deny rule. What is the most likely cause and the best first step?

   • AThe firewall's state table is full; reboot the firewall to clear it.
   • BA missing or misconfigured allow rule; review the rule order and the specific traffic attributes to identify the gap.
   • CThe firewall is under a denial-of-service attack; immediately block all traffic.
   • DThe firewall's logging is misconfigured; enable more detailed logs to see the traffic.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A firewall administrator needs to allow remote employees to access the company's internal file server using a VPN. The VPN gateway is on the perimeter network. Which firewall rule is necessary?

   • AAllow outbound traffic from the internal file server to the internet on port 445.
   • BAllow all inbound traffic to the VPN gateway on all ports.
   • CAllow inbound VPN traffic to the VPN gateway on the VPN protocol port (e.g., UDP 500 and UDP 4500 for IPsec).
   • DAllow inbound traffic directly to the internal file server on port 445 from the internet.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A small company has a single internet connection and a single internal network. They want to protect their internal hosts from unsolicited inbound traffic while allowing all outbound traffic. Which firewall deployment is the simplest and most effective for this requirement?

   • AA stateful firewall at the perimeter with a default-deny inbound policy and an allow-all outbound policy.
   • BA packet-filtering firewall on each internal host.
   • CA firewall placed between two internal network segments only.
   • DA dual-homed host with a proxy server for all outbound traffic.
   Reveal Solution Discussion Select an answer first