Network Proxies and Firewalls GDSA Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A company wants to require employees to authenticate before accessing the internet through the proxy, and also wants to block access to a list of known malicious domains. Which proxy features should be enabled?

   • ACaching and content inspection
   • BLoad balancing and failover
   • CAuthentication and URL filtering
   • DSSL inspection and logging
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company wants to enforce a policy that blocks access to social media sites during work hours, but allows access during lunch breaks. They also need to log all web requests for compliance. Which proxy configuration is most appropriate?

   • AConfigure URL filtering with time-based policies and enable access logging.
   • BConfigure content inspection to detect social media usage and log it.
   • CConfigure authentication and block all social media sites permanently.
   • DConfigure caching to reduce bandwidth and enable logging.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   In a DMZ architecture, what is the primary purpose of placing a firewall between the DMZ and the internal network?

   • ATo control and restrict traffic between the DMZ and the internal network, allowing only necessary communications
   • BTo replace the need for a firewall at the internet edge
   • CTo allow unrestricted traffic from the DMZ to the internal network
   • DTo provide a direct route for external users to access internal databases
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A small office uses a single firewall to connect its LAN to the internet. The administrator wants to block all inbound traffic except HTTPS to a public web server, and allow outbound DNS and HTTPS from internal clients. Which rule set best implements least privilege?

   • AAllow inbound HTTPS to any internal IP, block outbound HTTPS, and allow all other outbound traffic.
   • BBlock all inbound, allow outbound DNS and HTTPS, and add a specific inbound allow rule for HTTPS to the web server only.
   • CAllow all inbound HTTPS, allow all outbound, and block all other inbound traffic.
   • DPlace the firewall in transparent mode and apply no rules, relying on the ISP's upstream filtering.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   When designing firewall rules, what does the principle of least privilege require?

   • AUsing the same rule set for all network segments to simplify management
   • BAllowing all traffic by default and then blocking specific threats
   • CPlacing rules in any order, as the firewall sorts them automatically
   • DGranting only the minimum necessary access required for legitimate business functions
   Reveal Solution Discussion Select an answer first