Firewall Concepts MCQ Questions Answers

1. Firewalls fall into ____ major processing mode categories

2. Firewall policies should govern ________.

3. After an antivirus server performs filtering, it may ________.

4. A network that needs to connect to the internet might have a ____ host and a service network.

5. A firewall designed specifically for home networks is called a ________ firewall.

6. A __________ is a system that protects the computer network from unauthorized access.

7. Which key is sharable in PKI (Public Key Infrastructure)?

8. Expand TACACS.

9. Keeping in mind the performance of Firewalls, the frequently used rules in the rule base________________.

10. HTTPS uses ___________ encryption technology to encrypt the communication between Client's system and Firewalls.

11. Which of the events listed below should be monitored?

12.

State whether True or False.

A Firewall installed at the Gateway makes the whole network secure.

13. Which of the traffic listed below should be generally blocked?

14. What is the range of reserved ports?

15. At which layer does the IPSec work?

16.

Firewall can perform NAT to keep the record of various NAT entries. In which of the following tables does Firewall make those entries?

17.

State whether True or False.

All the DoS attacks can be blocked with the Firewalls.

18. Which command is used to check whether a particular host is live or not?

19.

State whether True or False.

Logging should be enabled for all the rules in the Rule Base.

20. By using which command can you see the active TCP connections?

21.

State whether True or False.

The security of the Firewalls is a very important aspect.

22. At which layer do the Firewalls generally work in the OSI model?

23.

Suppose Sally is the Network Security Engineer for ABC Company. She is asked by her manager to create a security policy in the Firewalls so that their internal network ABC_INTERNAL(172.16.0.0/24) may be able to access the SMTP(25) service from the server MAIL_SERVER(192.168.1.15).NAT rule already exists for the network. How will Sally create the security policy in the Firewalls?

24. What is SSL?

25. What does AAA stand for?

26.

State whether True or False.

The vulnerabilities in the Network/System can be exploited by threats.

27. What is the range of dynamic ports?

28. What is Spoofing?

29. What does RADIUS stand for?

30. In a Stateful Inspection Firewall, the entries about the connection states are made in the_______________ table.

31. Layer 2 Tunneling Protocol is a type of__________.

32. How many TCP flags are present in the Firewalls concept?

33. At which layer do the Proxy Firewalls function?

34. Which of the following is a type of DoS attack?

35. Which of the following things should be kept in mind before implementing/configuring the Firewalls?

36. Which zone is the trusted zone in Firewalls architecture?

37. Which of the following is a Firewall technology?

38.

Suppose Mark is the Network Security Engineer for ABC Company. He is asked by his manager to create a security policy in the Firewalls so that their internal network ABC_INTERNAL(172.16.0.0/24)may be able to access the DNS service from the server DNS_SERVER(192.168.1.5). NAT rule already exists for the Network. How will Mark create the security policy in the Firewalls?

39. What is the CIA concept?

40. A TCP connection is complete when it receives the_____________Packet.

41. Which among the following Firewalls is the slowest?

42.

You are asked by your manager to publish a web server.

Which type of NATing will you use so that the Web Server can be accessed from the Internet?

43. Which Packet is sent by the source to initiate the connection in TCP 3-way handshake?

44.

State whether True or False.

When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

45. Syslog protocol is used for __________.

46. Which command is used to determine the route taken by a Packet?

47.

Suppose Adrian is the Network Security Engineer for ABC Company. He is asked by his manager to create a security policy in the Firewalls to open the HTTP service for a host_A(192.168.1.2) so that host_A may be able to access the Web Server(172.16.0.2). NAT rule already exists for the host. How will Adrian create the security policy in the Firewalls?

48. What is the sequence in which the rules are executed in the Rule Base?

49. Auditing is the process of tracking ________________________ on a system.

50. What are the advantages of Stateful Inspection Firewall?

51. Which zone is the un-trusted zone in Firewalls architecture?

52. At which layer does the Circuit-Level Firewall work?

53. Which type of Firewalls keep a track on the state of the connection?

54. What does sniffing mean?

55. Suppose Eric is a Network Security Engineer in ABC Company. He is asked by his manager to block the access to unauthorized web sites being accessed by the users of the company. Can these unauthorized web sites be blocked with the Firewalls?

56.

Suppose Matt is the Network Security Engineer for XYZ Company. He is asked by his manager to create a security policy in the Firewalls so that host_A(172.16.0.3) may be able to access the HTTP service from the internet cloud. NAT rule already exists for the host. How will Matt create the security policy in the Firewalls?

57. Generally, a Firewall can not be managed by which of the following:

58. Which of the following are the functions of a Firewall?

59. What exactly is the Stateful Packet Filtering?

60. What is the action on Packet when we apply the action, REJECT?

61. Which of the following ports is used by IMAP?

62. What are the functions of a Desktop Firewall?

63. Over which of the following can a VPN be established?

64.

65. Which of the following things should be kept in mind while troubleshooting the Firewall problems?

66. What exactly is spoofing?

67. What exactly is a DoS?

68. Which layer of the OSI model is used by Packet filtering?

69. The______________ TCP flag can launch a DoS attack.

70. What is the mode of operation of Firewalls?

71. Which of the following are hash algorithms?

72. Which protocol is used by the DNS?

73. Which of the following can lead to the denial of service attacks?

74. Which of the reasons listed below lead to common attacks?

75. Port-Scanning tools helps the administrator in which of the following?

76. Which of the sources listed below are secured by Desktop Firewalls?

77. Which of the following tools can be used to monitor the Packets?

78. Digital Certificates are used for___________.

79. Which of the following are Encryption algorithms?

80. Which of the protocols listed below will you scan at the Gateway to block the Spam Mails?

81. Which of the following is helped by Logging?

82. Which of the following is an INVALID common architectural implementation of firewall?

83. Which generation firewalls are either application-level firewalls or proxy servers?

84. Which of the following is not a vaild categorization of Firewall based on processing mode?

85. What layer of the OSI model do Circuit Layer Firewalls operate at?

86. Which of the following is not a vaild categorization of Firewall based on structure?

87. Which level proxy provides protection at the session layer of OSI?

88. Which of the following host is sometimes called a dual-homed gateway or bastion host?

89. Which of the following can have different components of the firewall for different systems?

90. What layer(s) does an SPI firewall generally operate at?

91. In an IP packet header, which of the following describes the length of the header in 32-bit words and is a 4-bit value?

92. Which of the following is FALSE about Circuit Gateways?

93. Which generation firewalls are stateful inspection firewalls?

94. Which of the following is a mechanism designed into operating system kernel ?

95. Which of the following servers in the DMZ needs only list a limited number of public IP addresses?

96. What is a Cisco Access Control List (ACL) considered as?

97. Which of the following is not a VALID processing –mode category of firewalls?

98. A dynamic or Stateful Packet Inspection firewall maintains active "BLANK" sessions and "BLANK" pseudo sessions.

99. Which of the following is not a VALID subset of packet filtering firewalls?

100. What do circuit layer Firewalls monitor?