1.3 Differentiate Access to Specific Applications NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is port-based identification insufficient for modern application access control?

   • ABecause applications can use any port, including well-known ports like 80 and 443.
   • BBecause port-based identification is too slow.
   • CBecause firewalls cannot inspect port numbers.
   • DBecause port numbers are not included in IP packets.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How does a next-generation firewall typically identify an application for access control decisions?

   • ABy inspecting the destination IP address and port number.
   • BBy querying the DNS server for the application's domain name.
   • CBy performing deep packet inspection and using application signatures.
   • DBy checking the source MAC address of the traffic.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does user location typically influence access to a specific application in a Zero Trust model?

   • AIt replaces the need for user authentication.
   • BIt determines which application version the user can access.
   • CIt has no impact on access decisions.
   • DIt can trigger additional authentication requirements or restrict access to sensitive data.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security architect is reviewing the firewall policy and finds that a rule intended to allow access to a specific application is also allowing access to other applications that use the same port. The architect wants to ensure that the rule only applies to the intended application. What is the most effective way to achieve this?

   • AUse a more specific port number in the rule.
   • BUse a more specific destination IP address in the rule.
   • CUse a more specific source IP address in the rule.
   • DUse App-ID in the rule to identify the specific application.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security architect is designing access control for a new application that uses a proprietary protocol. The application is not recognized by the default App-ID database. The architect needs to ensure that the firewall can identify the application for policy enforcement. What is the best course of action?

   • ACreate a custom App-ID for the proprietary application.
   • BWait for the vendor to add the application to the App-ID database.
   • CUse a rule that allows all traffic from the application's server.
   • DUse a rule based on the application's IP address and port.
   Reveal Solution Discussion Select an answer first