> > Firewall Concepts MCQs > Basic Firewall Concepts MCQs

Basic Firewall Concepts MCQ

1. Firewalls fall into ____ major processing mode categories

TGS

Five

KDC

Socks

Answer

Correct Answer: Five

Note: This Question is unanswered, help us to find answer for this one

2. Firewall policies should govern ________.

Both Configuration and Testing

Both Public Webservers and External DNS servers

Both stateful packet and static packet filtering

Drop packets it cannot process

Answer

Correct Answer: Both Configuration and Testing

Note: This Question is unanswered, help us to find answer for this one

3. After an antivirus server performs filtering, it may ________.

Both scanning probes and sniffers from learning anything about the internal IP address of internal hosts.

All of these (drop the object, send the object to the firewall to pass to the destination, pass the object to the destination directly)

None of these (border, internal, application proxy)

Neither always do application content filtering nor have the slow speed of relay operation

Answer

Correct Answer: All of these (drop the object, send the object to the firewall to pass to the destination, pass the object to the destination directly)

Note: This Question is unanswered, help us to find answer for this one

4. A network that needs to connect to the internet might have a ____ host and a service network.

Packet Filtering

Cached Data

Proxy Server

Bastion Host

Answer

Correct Answer: Bastion Host

Note: This Question is unanswered, help us to find answer for this one

5. A firewall designed specifically for home networks is called a ________ firewall.

Home

Personal

Ogical

Static

Answer

Correct Answer: Personal

Note: This Question is unanswered, help us to find answer for this one

6. A __________ is a system that protects the computer network from unauthorized access.

Lock

Guard

Shield

Firewall

Answer

Correct Answer: Firewall

Note: This Question is unanswered, help us to find answer for this one

7. Which key is sharable in PKI (Public Key Infrastructure)?

Public key

Private key

Pre-shared key

Encryption key

Answer

Correct Answer: Public key

Note: This Question is unanswered, help us to find answer for this one

8. Expand TACACS.

Terminal Authenticated Controller Access System

Terminal Access Controller Access-Control System

Terminal Authorized Controller Access-Control System

Terminal Authorized Controller Access-Control Securely

Answer

Correct Answer: Terminal Access Controller Access-Control System

Note: This Question is unanswered, help us to find answer for this one

9. Keeping in mind the performance of Firewalls, the frequently used rules in the rule base________________.

should be kept at the top

should be kept at the bottom

should be kept in the middle

none of the above

Answer

Correct Answer: should be kept at the top

Note: This Question is unanswered, help us to find answer for this one

10. HTTPS uses ___________ encryption technology to encrypt the communication between Client's system and Firewalls.

SHA 1

MD5

SSH

SSL

Answer

Correct Answer: SSL

Note: This Question is unanswered, help us to find answer for this one

11. Which of the events listed below should be monitored?

Packets dropped

Interface up/down

Firewall restart

Configuration Changes

All the above

Answer

Correct Answer: All the above

Note: This Question is unanswered, help us to find answer for this one

12.
State whether True or False.

A Firewall installed at the Gateway makes the whole network secure.

True

False

Answer

Correct Answer:

False

Note: This Question is unanswered, help us to find answer for this one

13. Which of the traffic listed below should be generally blocked?

Source routed Packets

Broadcasts

Peer-to-peer file sharing

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

14. What is the range of reserved ports?

1-1024

1024-2024

0-1023

1024-65,535

Answer

Correct Answer: 0-1023

Note: This Question is unanswered, help us to find answer for this one

15. At which layer does the IPSec work?

Session Layer

Network Layer

Data Link Layer

Application Layer

Answer

Correct Answer: Network Layer

Note: This Question is unanswered, help us to find answer for this one

16.
Firewall can perform NAT to keep the record of various NAT entries. In which of the following tables does Firewall make those entries?

ARP Table

NAT Table

State Table

TCP/IP Table

Answer

Correct Answer:

NAT Table

Note: This Question is unanswered, help us to find answer for this one

17.
State whether True or False.

All the DoS attacks can be blocked with the Firewalls.

True

False

Answer

Correct Answer:

False

Note: This Question is unanswered, help us to find answer for this one

18. Which command is used to check whether a particular host is live or not?

netstat

ipconfig

ifconfig

traceroute

ping

Answer

Correct Answer: ping

Note: This Question is unanswered, help us to find answer for this one

19.
State whether True or False.

Logging should be enabled for all the rules in the Rule Base.

True

False

Answer

Correct Answer:

False

Note: This Question is unanswered, help us to find answer for this one

20. By using which command can you see the active TCP connections?

netstat

ipconfig

ifconfig

traceroute

Answer

Correct Answer: netstat

Note: This Question is unanswered, help us to find answer for this one

21.
State whether True or False.

The security of the Firewalls is a very important aspect.

True

False

Answer

Correct Answer:

True

Note: This Question is unanswered, help us to find answer for this one

22. At which layer do the Firewalls generally work in the OSI model?

Network Layer

Transport Layer

Data Link Layer

Physical Layer

Answer

Correct Answer: Network Layer

Note: This Question is unanswered, help us to find answer for this one

23.
Suppose Sally is the Network Security Engineer for ABC Company. She is asked by her manager to create a security policy in the Firewalls so that their internal network ABC_INTERNAL(172.16.0.0/24) may be able to access the SMTP(25) service from the server MAIL_SERVER(192.168.1.15).NAT rule already exists for the network. How will Sally create the security policy in the Firewalls?

Source: ABC_INTERNAL(172.16.0.0/8),Destination: MAIL_SERVER(192.168.1.5), Service: SMTP(25), Action :Accept

Source:ABC_INTERNAL(172.16.0.0/16), Destination:MAIL_SERVER(192.168.1.15), Service: SMTP(25), Action :Accept

Source:ABC_INTERNAL(172.16.0.0/24), Destination:MAIL_SERVER(192.168.1.15), Service:POP3(110), Action :Accept

None of the above

Answer

Correct Answer:

Source:ABC_INTERNAL(172.16.0.0/16), Destination:MAIL_SERVER(192.168.1.15), Service: SMTP(25), Action :Accept

Note: This Question is unanswered, help us to find answer for this one

24. What is SSL?

Firewall Technology

A type of Attack

Encryption Technology

Secure Site Linking

Answer

Correct Answer: Encryption Technology

Note: This Question is unanswered, help us to find answer for this one

25. What does AAA stand for?

Authentication, Accounting and Administration

Advance, Application and Administration

Authentication, Authorization, and Accounting

None of these

Answer

Correct Answer: Authentication, Authorization, and Accounting

Note: This Question is unanswered, help us to find answer for this one

26.
State whether True or False.

The vulnerabilities in the Network/System can be exploited by threats.

True

False

Answer

Correct Answer:

False

Note: This Question is unanswered, help us to find answer for this one

27. What is the range of dynamic ports?

1-1024

1024-2024

0-1023

49,152-65,535

Answer

Correct Answer: 49,152-65,535

Note: This Question is unanswered, help us to find answer for this one

28. What is Spoofing?

It is a Firewall Technology

It is a Firewall Managing Technique

It is a DOS attack

It is Firewall Monitoring used while troubleshooting

It is a technique used to gain unauthorized access to computers

Answer

Correct Answer: It is a technique used to gain unauthorized access to computers

Note: This Question is unanswered, help us to find answer for this one

29. What does RADIUS stand for?

Remote Authorized Dial-In User Service

Remote Access Dial-In User Service

Remote Authentication Dial-In User Service

Remote Authentication Dial-In User System

Answer

Correct Answer: Remote Authentication Dial-In User Service

Note: This Question is unanswered, help us to find answer for this one

30. In a Stateful Inspection Firewall, the entries about the connection states are made in the_______________ table.

NAT Table

State Table

TCP/IP Table

Connection Table

ARP Table

Answer

Correct Answer: State Table

Note: This Question is unanswered, help us to find answer for this one

31. Layer 2 Tunneling Protocol is a type of__________.

VPN

Firewall

Encryption Technology

Authentication

Answer

Correct Answer: VPN

Note: This Question is unanswered, help us to find answer for this one

32. How many TCP flags are present in the Firewalls concept?

Answer

Correct Answer: 6

Note: This Question is unanswered, help us to find answer for this one

33. At which layer do the Proxy Firewalls function?

Session Layer

Data Link Layer

Transport Layer

Application Layer

None of the above

Answer

Correct Answer: Application Layer

Note: This Question is unanswered, help us to find answer for this one

34. Which of the following is a type of DoS attack?

TCP SYN attack

Ping of Death

SMURF attack

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

35. Which of the following things should be kept in mind before implementing/configuring the Firewalls?

Network Diagram

Traffic Flow

Topology

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

36. Which zone is the trusted zone in Firewalls architecture?

Local Area Network (LAN)

Wide Area Network (WAN)

DMZ

RAS

Answer

Correct Answer: Local Area Network (LAN)

Note: This Question is unanswered, help us to find answer for this one

37. Which of the following is a Firewall technology?

Packet Filters

Network Address Translation Firewall

Proxy Firewall

Stateful Firewall

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

38.
Suppose Mark is the Network Security Engineer for ABC Company. He is asked by his manager to create a security policy in the Firewalls so that their internal network ABC_INTERNAL(172.16.0.0/24)may be able to access the DNS service from the server DNS_SERVER(192.168.1.5). NAT rule already exists for the Network. How will Mark create the security policy in the Firewalls?

Source: ABC_INTERNAL(172.16.0.0/24), Destination: DNS_SERVER(192.168.1.5), Service: HTTP(80), Action :Accept

Source: ABC_INTERNAL(172.16.0.0/24), Destination: DNS_SERVER(192.168.1.5), Service: DNS(53), Action :Accept

Source:Any, Destination: ABC_INTERNAL(172.16.0.0/24), service DNS(53), Action :Accept

Source: ABC_INTERNAL(172.16.0.0/24), Destination: DNS_SERVER(192.168.1.5), Service: HTTP(80), Action :Drop

None of the above

Answer

Correct Answer:

Source: ABC_INTERNAL(172.16.0.0/24), Destination: DNS_SERVER(192.168.1.5), Service: DNS(53), Action :Accept

Note: This Question is unanswered, help us to find answer for this one

39. What is the CIA concept?

Confidentiality, Integrity and Access

Confidentiality, Integrity and Administration

Continuity, Integrity and Authentication

Confidentiality, Integrity and Availability

Answer

Correct Answer: Confidentiality, Integrity and Availability

Note: This Question is unanswered, help us to find answer for this one

40. A TCP connection is complete when it receives the_____________Packet.

SYN

ACK

SYN-ACK

URG

Answer

Correct Answer: ACK

Note: This Question is unanswered, help us to find answer for this one

41. Which among the following Firewalls is the slowest?

Packet filtering

Stateful Packet inspection

Application

Session

Answer

Correct Answer: Application

Note: This Question is unanswered, help us to find answer for this one

42.
You are asked by your manager to publish a web server.

Which type of NATing will you use so that the Web Server can be accessed from the Internet?

Static NAT

Dynamic NAT

Source based NAT

Destination based NAT

Answer

Correct Answer:

Static NAT

Note: This Question is unanswered, help us to find answer for this one

43. Which Packet is sent by the source to initiate the connection in TCP 3-way handshake?

SYN

SYN/ACK

ACK

All of the above

Answer

Correct Answer: SYN

Note: This Question is unanswered, help us to find answer for this one

44.
State whether True or False.

When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

True

False

Answer

Correct Answer:

False

Note: This Question is unanswered, help us to find answer for this one

45. Syslog protocol is used for __________.

managing the Firewall

event notification

encryption

VPN

Answer

Correct Answer: event notification

Note: This Question is unanswered, help us to find answer for this one

46. Which command is used to determine the route taken by a Packet?

netstat

ipconfig

ifconfig

traceroute

Answer

Correct Answer: traceroute

Note: This Question is unanswered, help us to find answer for this one

47.
Suppose Adrian is the Network Security Engineer for ABC Company. He is asked by his manager to create a security policy in the Firewalls to open the HTTP service for a host_A(192.168.1.2) so that host_A may be able to access the Web Server(172.16.0.2). NAT rule already exists for the host. How will Adrian create the security policy in the Firewalls?

Source: Web_Server(172.16.0.2), Destination(192.168.1.2): host_A, Service: HTTP(80), Action :Accept

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: HTTP(80), Action :Reject

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: SMTP(25), Action :Accept

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: HTTP(80), Action :Accept

None of the above

Answer

Correct Answer:

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: HTTP(80), Action :Accept

Note: This Question is unanswered, help us to find answer for this one

48. What is the sequence in which the rules are executed in the Rule Base?

From the bottom of the rule base to the top of the rule base

From the top of the rule base to the bottom of the rule base

Random

According to the priority

Answer

Correct Answer: From the top of the rule base to the bottom of the rule base

Note: This Question is unanswered, help us to find answer for this one

49. Auditing is the process of tracking ________________________ on a system.

events

errors

access

authentication

All the above

Answer

Correct Answer: All the above

Note: This Question is unanswered, help us to find answer for this one

50. What are the advantages of Stateful Inspection Firewall?

High Performance

Security

Transparency

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

51. Which zone is the un-trusted zone in Firewalls architecture?

Local Area Network(LAN)

Wide Area Network(WAN)

DMZ

RAS

Answer

Correct Answer: Wide Area Network(WAN)

Note: This Question is unanswered, help us to find answer for this one

52. At which layer does the Circuit-Level Firewall work?

Session Layer

Data Link Layer

Transport Layer

Physical Layer

Network Layer

Answer

Correct Answer: Session Layer

Note: This Question is unanswered, help us to find answer for this one

53. Which type of Firewalls keep a track on the state of the connection?

Application Firewall

Packet Filtering Firewall

Stateful Packet Filtering Firewall

Session Firewall

Answer

Correct Answer: Stateful Packet Filtering Firewall

Note: This Question is unanswered, help us to find answer for this one

54. What does sniffing mean?

Encrypting a data

Decrypting a data

Encryption algorithm

Capturing data traveling across the network

Answer

Correct Answer: Capturing data traveling across the network

Note: This Question is unanswered, help us to find answer for this one

55. Suppose Eric is a Network Security Engineer in ABC Company. He is asked by his manager to block the access to unauthorized web sites being accessed by the users of the company. Can these unauthorized web sites be blocked with the Firewalls?

Yes, the sites can be blocked

No, the sites cannot be blocked

Answer

Correct Answer: No, the sites cannot be blocked

Note: This Question is unanswered, help us to find answer for this one

56.
Suppose Matt is the Network Security Engineer for XYZ Company. He is asked by his manager to create a security policy in the Firewalls so that host_A(172.16.0.3) may be able to access the HTTP service from the internet cloud. NAT rule already exists for the host. How will Matt create the security policy in the Firewalls?

Source: Host_A(172.16.0.3), Destination:Any , Service: HTTP(80), Action :Accept

Source: Host_A(172.16.0.3), Destination:Any , Service: POP3(110), Action :Accept

Source:Any, Destination: Host_A(172.16.0.3), Service: HTTP(80), Action :Accept

Source: Host_A(172.16.0.3), Destination:Any , Service: HTTP(80), Action :Drop

All of the above

Answer

Correct Answer:

Source: Host_A(172.16.0.3), Destination:Any , Service: HTTP(80), Action :Accept

Note: This Question is unanswered, help us to find answer for this one

57. Generally, a Firewall can not be managed by which of the following:

GUI

CLI

SSH

FTP

Answer

Correct Answer: FTP

Note: This Question is unanswered, help us to find answer for this one

58. Which of the following are the functions of a Firewall?

It filters the packet

It protects the resources

It records and reports the events

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

59. What exactly is the Stateful Packet Filtering?

It is an attack

It is a Firewall Technology

It is a Security Policy

Answer

Correct Answer: It is a Firewall Technology

Note: This Question is unanswered, help us to find answer for this one

60. What is the action on Packet when we apply the action, REJECT?

The Packet is dropped

The ACK Packet is sent

The FIN Packet is sent

An error Packet is sent when a matched packet is detected

All of the above

Answer

Correct Answer: An error Packet is sent when a matched packet is detected

Note: This Question is unanswered, help us to find answer for this one

61. Which of the following ports is used by IMAP?

143

153

159

110

Answer

Correct Answer: 143

Note: This Question is unanswered, help us to find answer for this one

62. What are the functions of a Desktop Firewall?

It blocks the worms replicating in the Network

It Controls the Access

It blocks the attacks on a Desktop machine

It scans the system for viruses

Answer

Correct Answer: It blocks the attacks on a Desktop machine

Note: This Question is unanswered, help us to find answer for this one

63. Over which of the following can a VPN be established?

WAN Link

Internet Link

Wireless connectivity

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

64.

Ethereal

Nessus

TCPDUMP

SNORT

Answer

Correct Answer: Nessus

Note: This Question is unanswered, help us to find answer for this one

65. Which of the following things should be kept in mind while troubleshooting the Firewall problems?

Verification of the problem

Status of the Firewall

Firewall Logs

Firewall Configuration

All of the above

Answer

Correct Answer: All of the above

Note: This Question is unanswered, help us to find answer for this one

66. What exactly is spoofing?

Sending a lot of mails on the same email address

Sending a lot of SYN Packets

Pretending to be someone you are not

Sending spam mails

Answer

Correct Answer: Pretending to be someone you are not

Note: This Question is unanswered, help us to find answer for this one

67. What exactly is a DoS?

It is a type of Attack

It is a type of Virus

It is a type of Firewalls

It is a Security Policy

Answer

Correct Answer: It is a type of Attack

Note: This Question is unanswered, help us to find answer for this one

68. Which layer of the OSI model is used by Packet filtering?

Transport Layer

Network Layer

Session layer

Application Layer

Answer

Correct Answer: Network Layer

Note: This Question is unanswered, help us to find answer for this one

69. The______________ TCP flag can launch a DoS attack.

ACK

FIN

SYN

SYN/ACK

URG

Answer

Correct Answer: SYN

Note: This Question is unanswered, help us to find answer for this one

70. What is the mode of operation of Firewalls?

Bridge mode

Route mode

Hybrid Mode

VPN Mode

Answer

Correct Answer: Hybrid Mode

Note: This Question is unanswered, help us to find answer for this one

71. Which of the following are hash algorithms?

MD5

AES

SHA 1

AES-128

AES-256

Answer

Correct Answer: MD5
SHA 1

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

72. Which protocol is used by the DNS?

TCP

UDP

IPX

Answer

Correct Answer: TCP
UDP

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

73. Which of the following can lead to the denial of service attacks?

Unplugging the cable of the main switch

Spoofing the Packets

Sending SYN Packets using the Zombies

Shutting down the server being accessed

Answer

Correct Answer: Unplugging the cable of the main switch
Sending SYN Packets using the Zombies
Shutting down the server being accessed

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

74. Which of the reasons listed below lead to common attacks?

Un-authorized mail relaying

Application bugs

Operating System bugs

Spoofing

Answer

Correct Answer: Un-authorized mail relaying
Application bugs
Operating System bugs
Spoofing

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

75. Port-Scanning tools helps the administrator in which of the following?

Finding the vulnerabilities

Crashing the Firewall.

Building a strong security policy.

To test the Firewalls configuration.

Answer

Correct Answer: Finding the vulnerabilities
Building a strong security policy.
To test the Firewalls configuration.

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

76. Which of the sources listed below are secured by Desktop Firewalls?

Personal Desktop

Scanners

Printers

Personal Files and folders

Answer

Correct Answer: Personal Desktop
Personal Files and folders

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

77. Which of the following tools can be used to monitor the Packets?

Wireshark

Nessus

TCPDUMP

Snort

Answer

Correct Answer: Wireshark
TCPDUMP

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

78. Digital Certificates are used for___________.

Encryption

Verification

Attacking

Authentication

Answer

Correct Answer: Encryption
Verification
Authentication

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

79. Which of the following are Encryption algorithms?

SHA1

AES

MD5

3DES

DES

CAST

Answer

Correct Answer: AES
3DES
DES

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

80. Which of the protocols listed below will you scan at the Gateway to block the Spam Mails?

HTTP

SMTP

POP3

IMAP

Answer

Correct Answer: SMTP
POP3

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

81. Which of the following is helped by Logging?

Health of the Firewalls

Status of the Firewalls

Troubleshooting the issues

Monitoring the Firewalls

Answer

Correct Answer: Health of the Firewalls
Status of the Firewalls
Troubleshooting the issues
Monitoring the Firewalls

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

82. Which of the following is an INVALID common architectural implementation of firewall?

packet filtering routers

dual-homed firewalls

Dynamic Filtering

screened host firewalls

Answer

Correct Answer: Dynamic Filtering

Note: This Question is unanswered, help us to find answer for this one

83. Which generation firewalls are either application-level firewalls or proxy servers?

First Generation

Third Generation

Second generation

Fourth Generation

Answer

Correct Answer: Second generation

Note: This Question is unanswered, help us to find answer for this one

84. Which of the following is not a vaild categorization of Firewall based on processing mode?

Application gateway

Packet filtering Firewalls

Application filtering

Circuit gateway

Answer

Correct Answer: Application filtering

Note: This Question is unanswered, help us to find answer for this one

85. What layer of the OSI model do Circuit Layer Firewalls operate at?

Session Layer

Application Layer

Transport Layer

Network Layer

Answer

Correct Answer: Session Layer

Note: This Question is unanswered, help us to find answer for this one

86. Which of the following is not a vaild categorization of Firewall based on structure?

hardware-based

application-based

residential grade

commercial-grade

Answer

Correct Answer: application-based

Note: This Question is unanswered, help us to find answer for this one

87. Which level proxy provides protection at the session layer of OSI?

application

proxy

server

circuit

Answer

Correct Answer: circuit

Note: This Question is unanswered, help us to find answer for this one

88. What layer(s) does an SPI firewall generally operate at?

D and F

Network

Application

Data Link

Answer

Correct Answer: D and F

Note: This Question is unanswered, help us to find answer for this one

89. In an IP packet header, which of the following describes the length of the header in 32-bit words and is a 4-bit value?

total length

fragment offset

header checksum

Internet header length

Answer

Correct Answer: Internet header length

Note: This Question is unanswered, help us to find answer for this one

90. Which of the following is FALSE about Circuit Gateways?

Firewall operates at the transport layer

Circuit gateways firewalls DO NOT look at data traffic flowing between one network and another

Circuit Gateway firewalls provide a unique access mechanism based on the destination application

Circuit Gateway firewalls provide a common access mechanism which is not dependent on the destination application

Answer

Correct Answer: Circuit Gateway firewalls provide a unique access mechanism based on the destination application

Note: This Question is unanswered, help us to find answer for this one

91. Which generation firewalls are stateful inspection firewalls?

Third Generation

Second generation

First Generation

Fourth Generation

Answer

Correct Answer: Third Generation

Note: This Question is unanswered, help us to find answer for this one

92. Which of the following is a mechanism designed into operating system kernel ?

First Generation

Second generation

Third Generation

Fifth Generation

Answer

Correct Answer: Fifth Generation

Note: This Question is unanswered, help us to find answer for this one

93. Which of the following servers in the DMZ needs only list a limited number of public IP addresses?

DNS

firewall

NAT

proxy

Answer

Correct Answer: DNS

Note: This Question is unanswered, help us to find answer for this one

94. What is a Cisco Access Control List (ACL) considered as?

NAT

Stateful

Controlled

Stateless

Answer

Correct Answer: Stateless

Note: This Question is unanswered, help us to find answer for this one

95. Which of the following is not a VALID processing –mode category of firewalls?

Proxy firewalls

Packet filtering Firewalls

Circuit gateways

Application gateways

Answer

Correct Answer: Proxy firewalls

Note: This Question is unanswered, help us to find answer for this one

96. A dynamic or Stateful Packet Inspection firewall maintains active "BLANK" sessions and "BLANK" pseudo sessions.

Stateful and Stateless

Server and Host

TCP and UDP

IP and ICMP

Answer

Correct Answer: TCP and UDP

Note: This Question is unanswered, help us to find answer for this one

97. Which of the following is not a VALID subset of packet filtering firewalls?

Static filtering

Stateless inspection

Dynamic Filtering

Stateful inspection

Answer

Correct Answer: Stateless inspection

Note: This Question is unanswered, help us to find answer for this one

98. What do circuit layer Firewalls monitor?

TCP Handshaking

UDP Handshaking

IP Handshaking

Transport Handshaking

Answer

Correct Answer: TCP Handshaking

Note: This Question is unanswered, help us to find answer for this one

99. Network-based firewalls and Host-based firewalls are valid categories of which of the following firewall ?

Application –level firewall

Hybrids

MAC layer firewalls

Circuit Gateways

Answer

Correct Answer: Application –level firewall

Note: This Question is unanswered, help us to find answer for this one

100. A "BLANK" flowing through a firewall is another term for a packet of digital information.

Datagram

Packet

Frame

Data

Answer

Correct Answer: Datagram

Note: This Question is unanswered, help us to find answer for this one

101. Which particular generation firewall are stateless in nature ?

Fourth Generation

Second generation

First Generation

Third Generation

Answer

Correct Answer: First Generation

Note: This Question is unanswered, help us to find answer for this one

102. Ports up to "BLANK" are considered well known ports.

1024

1023

65536

65524

Answer

Correct Answer: 1023

Note: This Question is unanswered, help us to find answer for this one

103. What device should be the front line defense in your network?

Packet Filtering Firewalls

Stateful Packet Inspection firewall

Network Layer Firewalls

Application Based Firewalls

Answer

Correct Answer: Stateful Packet Inspection firewall

Note: This Question is unanswered, help us to find answer for this one

104. A Stateful Packet Inspection firewall maintains a "BLANK", which is also just a list of active connections.

Routing Table

Connection Table

NAT Table

State Table

Answer

Correct Answer: State Table

Note: This Question is unanswered, help us to find answer for this one

105. What technology is used on firewalls that process stateful packet inspections at the hardware level and as close to the line rate as possible?

ASIC

Intel

SPI

ACL

Answer

Correct Answer: ASIC

Note: This Question is unanswered, help us to find answer for this one

106. What kind of firewall is the opensource IPtables firewall commonly found on Linux Distros?

Stateless

Zone Based

Connection oriented firewall

Stateful

Answer

Correct Answer: Stateful

Note: This Question is unanswered, help us to find answer for this one

107. What specific chip design allows firewalls to accelerate packet processing to analyze and filter packets between an untrusted and trusted network?

RISC

Intel X86

ASIC

MIPS

Answer

Correct Answer: ASIC

Note: This Question is unanswered, help us to find answer for this one

108. Which of the following firewall makes the filtering decision based on the media access control address of the source/destination of a packet ?

Packet Filtering

MAC layer Firewalls

Circuit Gateways

Application Gateways

Answer

Correct Answer: MAC layer Firewalls

Note: This Question is unanswered, help us to find answer for this one

109. What it is called when a packet arrives at a firewall, gets analyzed and determines that no connection exists and the packet is dropped?

Connection Oriented Inspection

Stateful Packet Inspection

Stateless Packet Inspection

Stateful Frame Inspection

Answer

Correct Answer: Stateful Packet Inspection

Note: This Question is unanswered, help us to find answer for this one

110. What happens when a packet arrives on an interface and a route exists in the local routing table and the firewall routes the packet back out the same interface the packet arrived on?

The Packet is allowed, but marked as low priority

The Packet is dropped

Interface will get disabled due to a routing conflict

Poison reverse routing is disabled and the packet is allowed

Answer

Correct Answer: The Packet is dropped

Note: This Question is unanswered, help us to find answer for this one

111. Which of the following server creates a secure tunnel connection?

authentication

RADIUS

tunnel

VPN

Answer

Correct Answer: VPN

Note: This Question is unanswered, help us to find answer for this one

112. What is the primary purpose of a firewall?

Enables fast forwarding

Route hot packets

Route frames

Inspect packets

Answer

Correct Answer: Inspect packets

Note: This Question is unanswered, help us to find answer for this one

113. Your customer asks you to allow ALL hosts from the Internet to company's secure webserver (Secure HTTP), what port do you open on the firewall?

443

Answer

Correct Answer: 443

Note: This Question is unanswered, help us to find answer for this one

114. Your client asks you to create a rule for FTP access, what port(s) will you add on the firewall?

8021

20 and 21

2121

Answer

Correct Answer: 20 and 21

Note: This Question is unanswered, help us to find answer for this one

115. FTP uses which of the following port as control port?

Answer

Correct Answer: 21

Note: This Question is unanswered, help us to find answer for this one

116. Which TCP port is used by Telnet?

110

Answer

Correct Answer: 23

Note: This Question is unanswered, help us to find answer for this one

117. Which of the following is not a recognized generation of Firewall?

Second generation

DMZ

Third Generation

First Generation

Answer

Correct Answer: DMZ

Note: This Question is unanswered, help us to find answer for this one

118. What is a DMZ zone?

Dedicated Master Zone

Donor Master Zone

Dual Master Zone

DeMilitarized Zone

Answer

Correct Answer: DeMilitarized Zone

Note: This Question is unanswered, help us to find answer for this one

119. Which of the following 8-bit values identifies the maximum time the packet can remain in the system before it is dropped?

fragment

checksum

protocol

time to live

Answer

Correct Answer: time to live

Note: This Question is unanswered, help us to find answer for this one

120. Which of the following is TRUE?

All of the given options are correct

Firewalls can be categorized by processing mode, development era, or structure

Firewalls categorized by which level of technology they employ are identified by generation, with the later generations being more complex and more recently developed

The firewall may be a separate computer system, a software service running on an existing router or server, or a separate network containing a number of supporting devices

Answer

Correct Answer: All of the given options are correct

Note: This Question is unanswered, help us to find answer for this one

121. What device logically filters traffic at the edge of a computer network and the Internet?

Hub

Firewall

Switch

Router

Answer

Correct Answer: Firewall

Note: This Question is unanswered, help us to find answer for this one

122. Which of the following firewalls works at the application level?

application-level firewalls

circuit firewall

MAC layer firewalls

Packet filtering firewal

Answer

Correct Answer: application-level firewalls

Note: This Question is unanswered, help us to find answer for this one

123. You want to filter all traffic going to an internal web server from the Internet side of the firewall, what port will you filter on the firewall?

8080

Answer

Correct Answer: 80

Note: This Question is unanswered, help us to find answer for this one

124. In an IP packet header, which of the following is the address of the computer or device that is to receive the packet?

total length

flag

destination address

source address

Answer

Correct Answer: destination address

Note: This Question is unanswered, help us to find answer for this one

125. What port does FTP use for the control port?

Answer

Correct Answer: 21

Note: This Question is unanswered, help us to find answer for this one

126. Which port does secure HTTP use?

443

441

442

8080

Answer

Correct Answer: 443

Note: This Question is unanswered, help us to find answer for this one

127. Which of the following firewalls keeps track of the connection state?

Application layer firewall

Router enhanced firewall

Stateful packet filtering firewall

Packet filtering firewall

Answer

Correct Answer: Stateful packet filtering firewall

Note: This Question is unanswered, help us to find answer for this one

128. What is a host based firewall?

A device that is installed by your Internet Service Provider

Software firewall installed on a server/workstation/desktop

A proxy server configured to handle http requests

A Firewall connected directly to the Network Interface Card of a Computer

Answer

Correct Answer: Software firewall installed on a server/workstation/desktop

Note: This Question is unanswered, help us to find answer for this one

129. Packets contain an 8-bit value that determines the maximum time the packet can remain the CPU, Memory, and Buffer circuits of a firewall before it is dropped or discarded, what is this called?

Time To Live

Checksum

Protocol

Fragment

Answer

Correct Answer: Time To Live

Note: This Question is unanswered, help us to find answer for this one

130. Some firewalls deploy a technology that allows monitoring of traffic in and out of a network and alerts network staff when suspicious traffic patterns occur.

IDS

Switch

Router

Hub

Answer

Correct Answer: IDS

Note: This Question is unanswered, help us to find answer for this one

131. What application controls what information is transmitted or received from an external source destined to a server, workstation, or computer that is based on a preset of rules and/or user preferences?

Firewall

Server

Repeater

Router

Answer

Correct Answer: Firewall

Note: This Question is unanswered, help us to find answer for this one

132. When referring to firewall concepts, what are application level gateways?

IP Servers

Proxy servers

HTTP servers

Answer

Correct Answer: Proxy servers

Note: This Question is unanswered, help us to find answer for this one

133. The Windows based program, ZoneAlarm is an example of a "BLANK" firewall?

IDS

Software

Corporate

Business

Answer

Correct Answer: Software

Note: This Question is unanswered, help us to find answer for this one

134. You are a network administrator and you have been asked to add a deny all ICMP firewall stated that is sourced from the Internet; you add a deny all for ICMP, what common command would you use to test your newly added rule?

MTR

PING

ICMP

Traceroute

Answer

Correct Answer: PING

Note: This Question is unanswered, help us to find answer for this one

135. When designing a network that consists of a firewall, the firewall design needs to be "BLANK" so that it can grow with the network it protects.

Cost effective

Robust

Expensive

Scalable

Answer

Correct Answer: Scalable

Note: This Question is unanswered, help us to find answer for this one

136. Which of the folllowing firewalls keeps track of the state of network connections ?

Dynamic Filtering

Stateful inspection

Static filtering

Stateless inspection

Answer

Correct Answer: Stateful inspection

Note: This Question is unanswered, help us to find answer for this one

137. When referring to firewalls, what does SPI Stand for?

Source Packet Information

Stateful Packet Inspection

Shared Packet Interconnection

Stateless Packet Inspection

Answer

Correct Answer: Stateful Packet Inspection

Note: This Question is unanswered, help us to find answer for this one

138. The practice of designing operational aspects of a system to work with a minimal amount of system privilege is called:

access denied

least privilege

failover firewall

IP forwarding

Answer

Correct Answer: least privilege

Note: This Question is unanswered, help us to find answer for this one

139. What types of firewalls are able to analyze the contents of packets and the IP headers for signs that the traffic is legitimate?

Software

Boundary

Stateless

Stateful

Answer

Correct Answer: Stateful

Note: This Question is unanswered, help us to find answer for this one

140. What main attributes are used at layer 4 of the OSI model to filter traffic on a firewall?

Frames and packets

Source and/or destination IP Addresses

Source and/or destination TCP/UDP ports

ICMP and IP

Answer

Correct Answer: Source and/or destination TCP/UDP ports

Note: This Question is unanswered, help us to find answer for this one

141. Which of the following is another term for a packet of digital information?

header

datagram

data

footer

Answer

Correct Answer: datagram

Note: This Question is unanswered, help us to find answer for this one

142. Which of the following is not a VALID basic criteria for rule in the firewall policy?

Service

Source

User

Destination

Answer

Correct Answer: User

Note: This Question is unanswered, help us to find answer for this one

143. Which of the following valid OSI layer are covered by packet filtering firewall operation ?

At the Application layer

Both Transport layer and Network layer

Network layer

Transport layer

Answer

Correct Answer: Both Transport layer and Network layer

Note: This Question is unanswered, help us to find answer for this one

144. When packets are being processed by a hardware firewall, one of the several steps in processing the packets is an error-checking procedure that is performed in the trailer section of an IP Packet, this is called what?

IFG

IPC (IP Check)

FQDN

CRC

Answer

Correct Answer: CRC

Note: This Question is unanswered, help us to find answer for this one

145. Which type of firewall involves firewall software installation directly on the user's system?

Commercial –Grade Firewall

Fourth Generation

Third Generation

Residential –Grade Firewall

Answer

Correct Answer: Residential –Grade Firewall

Note: This Question is unanswered, help us to find answer for this one

146. When troubleshooting the flow of packets through a firewall, a datagram is called what at the network layer of the OSI model?

Bits

Frames

Packets

Segments

Answer

Correct Answer: Packets

Note: This Question is unanswered, help us to find answer for this one

147. When configuring a firewall to deny port 3389 to a RDP server that is to receive the SYN packet, what is the address?

Connected

Source

Destination

Flag

Answer

Correct Answer: Destination

Note: This Question is unanswered, help us to find answer for this one

148. True/False: Application proxy firewalls are faster than Stateful Packet Inspection firewalls.

False

True

Answer

Correct Answer: False

Note: This Question is unanswered, help us to find answer for this one

149. Zone Alarm is an example of which type of firewall?

corporate

proxy

personal

IDS

Answer

Correct Answer: personal

Note: This Question is unanswered, help us to find answer for this one

150. What port do most DDOS DNS attacks occur on?

443

161

Answer

Correct Answer: 53

Note: This Question is unanswered, help us to find answer for this one

151. Which particular firewall usually consists of two separate firewall devices?

MAC layer firewalls

Dynamic Filtering

Hybrid Firewall

Application –level firewall

Answer

Correct Answer: Hybrid Firewall

Note: This Question is unanswered, help us to find answer for this one

152. Ports up to which of the following are called well-known ports?

1500

1023

255

1025

Answer

Correct Answer: 1023

Note: This Question is unanswered, help us to find answer for this one

153. Which of the following are the most common restrictions implemented in packet filtering firewalls?

Inbound Direction

Outbound Direction

All of the given options are valid

IP source and destination address

Answer

Correct Answer: All of the given options are valid

Note: This Question is unanswered, help us to find answer for this one

154. Which of the following firewall's filtering process can be either Stateful, Stateless or both ?

Packet Filtering

MAC layer firewalls

Application Gateways

Circuit Gateways

Answer

Correct Answer: Packet Filtering

Note: This Question is unanswered, help us to find answer for this one

155. What kind of firewall is the integrated Microsoft Windows firewall application?

Zone Based

Stateless

Stateful

Connection oriented firewall

Answer

Correct Answer: Stateful

Note: This Question is unanswered, help us to find answer for this one

156. The basic concept of a SYN flooding attack lies in the design of what handshake that begins a TCP connection?

TCP

3-way

2-way

4-way

Answer

Correct Answer: 3-way

Note: This Question is unanswered, help us to find answer for this one

157. What firewall based technology would you use to create a secure tunnel connection from a corporate headquarters to a remote branch office?

Tunnel

VPN

HTTPS

Radius

Answer

Correct Answer: VPN

Note: This Question is unanswered, help us to find answer for this one

Firewall Concepts MCQs | Topic-wise

MCQ on Basic Firewall Concepts

General Firewall Concepts MCQs

Firewall Concepts Subjects

More Resources

Firewall Concepts MCQ

Firewall Concepts Skill Assessment

Firewall Concepts PDF

Related MCQs

Game Development MCQs

Game Programming Concepts MCQs

Gamification MCQs

Git MCQs

Go (Programming Language) MCQs

Basic Firewall Concepts MCQ

1. Firewalls fall into ____ major processing mode categories

2. Firewall policies should govern ________.

3. After an antivirus server performs filtering, it may ________.

4. A network that needs to connect to the internet might have a ____ host and a service network.

5. A firewall designed specifically for home networks is called a ________ firewall.

6. A __________ is a system that protects the computer network from unauthorized access.

7. Which key is sharable in PKI (Public Key Infrastructure)?

8. Expand TACACS.

9. Keeping in mind the performance of Firewalls, the frequently used rules in the rule base________________.

10. HTTPS uses ___________ encryption technology to encrypt the communication between Client's system and Firewalls.

11. Which of the events listed below should be monitored?

12. State whether True or False.A Firewall installed at the Gateway makes the whole network secure.

13. Which of the traffic listed below should be generally blocked?

14. What is the range of reserved ports?

15. At which layer does the IPSec work?

16. Firewall can perform NAT to keep the record of various NAT entries. In which of the following tables does Firewall make those entries?

17. State whether True or False.All the DoS attacks can be blocked with the Firewalls.

18. Which command is used to check whether a particular host is live or not?

19. State whether True or False.Logging should be enabled for all the rules in the Rule Base.

20. By using which command can you see the active TCP connections?

21. State whether True or False.The security of the Firewalls is a very important aspect.

22. At which layer do the Firewalls generally work in the OSI model?

24. What is SSL?

25. What does AAA stand for?

26. State whether True or False.The vulnerabilities in the Network/System can be exploited by threats.

27. What is the range of dynamic ports?

28. What is Spoofing?

29. What does RADIUS stand for?

30. In a Stateful Inspection Firewall, the entries about the connection states are made in the_______________ table.

31. Layer 2 Tunneling Protocol is a type of__________.

32. How many TCP flags are present in the Firewalls concept?

33. At which layer do the Proxy Firewalls function?

34. Which of the following is a type of DoS attack?

35. Which of the following things should be kept in mind before implementing/configuring the Firewalls?

36. Which zone is the trusted zone in Firewalls architecture?

37. Which of the following is a Firewall technology?

39. What is the CIA concept?

40. A TCP connection is complete when it receives the_____________Packet.

41. Which among the following Firewalls is the slowest?

42. You are asked by your manager to publish a web server.Which type of NATing will you use so that the Web Server can be accessed from the Internet?

43. Which Packet is sent by the source to initiate the connection in TCP 3-way handshake?

44. State whether True or False.When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

45. Syslog protocol is used for __________.

46. Which command is used to determine the route taken by a Packet?

48. What is the sequence in which the rules are executed in the Rule Base?

49. Auditing is the process of tracking ________________________ on a system.

50. What are the advantages of Stateful Inspection Firewall?

51. Which zone is the un-trusted zone in Firewalls architecture?

52. At which layer does the Circuit-Level Firewall work?

53. Which type of Firewalls keep a track on the state of the connection?

54. What does sniffing mean?

55. Suppose Eric is a Network Security Engineer in ABC Company. He is asked by his manager to block the access to unauthorized web sites being accessed by the users of the company. Can these unauthorized web sites be blocked with the Firewalls?

57. Generally, a Firewall can not be managed by which of the following:

58. Which of the following are the functions of a Firewall?

59. What exactly is the Stateful Packet Filtering?

60. What is the action on Packet when we apply the action, REJECT?

61. Which of the following ports is used by IMAP?

62. What are the functions of a Desktop Firewall?

63. Over which of the following can a VPN be established?

64.

65. Which of the following things should be kept in mind while troubleshooting the Firewall problems?

66. What exactly is spoofing?

67. What exactly is a DoS?

68. Which layer of the OSI model is used by Packet filtering?

69. The______________ TCP flag can launch a DoS attack.

70. What is the mode of operation of Firewalls?

71. Which of the following are hash algorithms?

72. Which protocol is used by the DNS?

73. Which of the following can lead to the denial of service attacks?

74. Which of the reasons listed below lead to common attacks?

75. Port-Scanning tools helps the administrator in which of the following?

76. Which of the sources listed below are secured by Desktop Firewalls?

77. Which of the following tools can be used to monitor the Packets?

78. Digital Certificates are used for___________.

79. Which of the following are Encryption algorithms?

80. Which of the protocols listed below will you scan at the Gateway to block the Spam Mails?

81. Which of the following is helped by Logging?

82. Which of the following is an INVALID common architectural implementation of firewall?

83. Which generation firewalls are either application-level firewalls or proxy servers?

12.
State whether True or False.

A Firewall installed at the Gateway makes the whole network secure.

16.
Firewall can perform NAT to keep the record of various NAT entries. In which of the following tables does Firewall make those entries?

17.
State whether True or False.

All the DoS attacks can be blocked with the Firewalls.

19.
State whether True or False.

Logging should be enabled for all the rules in the Rule Base.

21.
State whether True or False.

The security of the Firewalls is a very important aspect.

26.
State whether True or False.

The vulnerabilities in the Network/System can be exploited by threats.

42.
You are asked by your manager to publish a web server.

Which type of NATing will you use so that the Web Server can be accessed from the Internet?

44.
State whether True or False.

When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.