Network Proxies and Firewalls GDSA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is deploying a reverse proxy to protect a web application. They want to offload TLS termination to the proxy and also perform content inspection. However, they are concerned about the proxy becoming a single point of failure. Which approach best addresses both the security and availability requirements?

   • ADeploy two reverse proxies in an active-passive configuration with a load balancer in front.
   • BDeploy a reverse proxy without TLS termination, letting the web server handle TLS.
   • CDeploy a reverse proxy with content inspection but no TLS termination.
   • DDeploy a single reverse proxy with TLS termination and content inspection.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst notices that the firewall logs show many outbound connections from an internal host to a known command-and-control IP on TCP 443. The firewall is a stateful firewall. Which action is most appropriate to stop the communication?

   • AChange the firewall to transparent mode to bypass filtering.
   • BDisable the stateful inspection feature on the firewall.
   • CBlock all outbound TCP 443 traffic from the entire network.
   • DAdd a rule to block outbound traffic from that host to that specific IP on TCP 443.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary role of a network proxy in a client-server architecture?

   • ATo act as an intermediary that forwards client requests to servers and returns responses to clients
   • BTo encrypt all traffic between the client and the server
   • CTo replace the server's role in processing client requests
   • DTo provide a direct network path between the client and the server
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a layered defense, what is a benefit of placing a proxy in front of a firewall?

   • AThe proxy can hide the firewall's IP address from external users
   • BThe proxy can perform stateful inspection of TCP connections
   • CThe proxy can filter malicious content before it reaches the firewall, reducing the firewall's load
   • DThe proxy can replace the firewall's network-layer filtering
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is designing a defense-in-depth architecture for a public web application. They have a limited budget and must choose between a WAF reverse proxy and a next-generation firewall (NGFW) with application inspection. The application is critical and must remain available. Which approach best balances security and availability?

   • ADeploy the WAF reverse proxy in front of the application and place the NGFW behind it for internal segmentation.
   • BDeploy only the NGFW at the perimeter and rely on its application inspection.
   • CDeploy the NGFW in front of the WAF reverse proxy.
   • DDeploy only the WAF reverse proxy and no firewall.
   Reveal Solution Discussion Select an answer first