Network Firewalls and Traffic Inspection GCAD Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is considering implementing SSL/TLS inspection on their NGFW. They are concerned about privacy and compliance. Which of the following is a critical consideration they must address?

   • AEmployees' personal browsing traffic will be decrypted and inspected, which may raise privacy concerns and require policy communication.
   • BSSL/TLS inspection will break all applications that use certificate pinning.
   • CSSL/TLS inspection is not allowed by any compliance framework.
   • DSSL/TLS inspection will slow down the network, but this is acceptable.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which placement strategy best supports a defense-in-depth approach for a cloud workload that includes a public-facing load balancer, application servers, and a database?

   • AFirewalls at the edge, between the load balancer and application tier, and between the application tier and database
   • BFirewalls only between the load balancer and the application servers
   • CA single firewall at the cloud provider's edge
   • DA firewall only in front of the database
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which traffic inspection method examines the payload of packets to identify application-layer protocols and detect malicious content?

   • AStatic packet filtering
   • BDeep packet inspection (DPI)
   • CStateful packet filtering
   • DPort-based access control
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a cloud architecture, where should a network firewall be placed to enforce a security boundary between a public-facing web tier and an internal application tier?

   • AIn the management subnet, to protect administrative access only
   • BOnly at the internet edge, in front of the web tier
   • CInside the application tier, on each individual virtual machine
   • DBetween the web tier and the application tier, in a separate security zone
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security operations team is setting up firewall logging for a multi-tier application. They want to ensure that logs are available for incident response and that they can detect anomalies such as port scanning. Which logging configuration is most appropriate?

   • AEnable logging on all firewall rules, including allowed and denied traffic, and forward logs to a centralized SIEM.
   • BStore logs locally on each firewall and only review them during an incident.
   • CEnable logging only on the perimeter firewall and not on internal firewalls.
   • DEnable logging only on denied traffic to reduce log volume and storage costs.
   Reveal Solution Discussion Select an answer first