Firewall Concepts Quiz # 4

Which of the following are hash algorithms?

MD5

AES

SHA 1

AES-128

AES-256

What is the mode of operation of Firewalls?

Bridge mode

Route mode

Hybrid Mode

VPN Mode

The______________ TCP flag can launch a DoS attack.

ACK

FIN

SYN

SYN/ACK

URG

Which layer of the OSI model is used by Packet filtering?

Transport Layer

Network Layer

Session layer

Application Layer

What exactly is a DoS?

It is a type of Attack

It is a type of Virus

It is a type of Firewalls

It is a Security Policy

What exactly is spoofing?

Sending a lot of mails on the same email address

Sending a lot of SYN Packets

Pretending to be someone you are not

Sending spam mails

Which of the following things should be kept in mind while troubleshooting the Firewall problems?

Verification of the problem

Status of the Firewall

Firewall Logs

Firewall Configuration

All of the above

Ethereal

Nessus

TCPDUMP

SNORT

Over which of the following can a VPN be established?

WAN Link

Internet Link

Wireless connectivity

All of the above

What are the functions of a Desktop Firewall?

It blocks the worms replicating in the Network

It Controls the Access

It blocks the attacks on a Desktop machine

It scans the system for viruses

Which of the following ports is used by IMAP?

143

153

159

25

110

What is the action on Packet when we apply the action, REJECT?

The Packet is dropped

The ACK Packet is sent

The FIN Packet is sent

An error Packet is sent when a matched packet is detected

All of the above

What exactly is the Stateful Packet Filtering?

It is an attack

It is a Firewall Technology

It is a Security Policy

Which of the following are the functions of a Firewall?

It filters the packet

It protects the resources

It records and reports the events

All of the above

Generally, a Firewall can not be managed by which of the following:

GUI

CLI

SSH

FTP

Suppose Matt is the Network Security Engineer for XYZ Company. He is asked by his manager to create a security policy in the Firewalls so that host_A(172.16.0.3) may be able to access the HTTP service from the internet cloud. NAT rule already exists for the host. How will Matt create the security policy in the Firewalls?

Source: Host_A(172.16.0.3), Destination:Any , Service: HTTP(80), Action :Accept

Source: Host_A(172.16.0.3), Destination:Any , Service: POP3(110), Action :Accept

Source:Any, Destination: Host_A(172.16.0.3), Service: HTTP(80), Action :Accept

Source: Host_A(172.16.0.3), Destination:Any , Service: HTTP(80), Action :Drop

All of the above

Suppose Eric is a Network Security Engineer in ABC Company. He is asked by his manager to block the access to unauthorized web sites being accessed by the users of the company. Can these unauthorized web sites be blocked with the Firewalls?

Yes, the sites can be blocked

No, the sites cannot be blocked

What does sniffing mean?

Encrypting a data

Decrypting a data

Encryption algorithm

Capturing data traveling across the network

Which type of Firewalls keep a track on the state of the connection?

Application Firewall

Packet Filtering Firewall

Stateful Packet Filtering Firewall

Session Firewall

At which layer does the Circuit-Level Firewall work?

Session Layer

Data Link Layer

Transport Layer

Physical Layer

Network Layer

Which zone is the un-trusted zone in Firewalls architecture?

Local Area Network(LAN)

Wide Area Network(WAN)

DMZ

RAS

What are the advantages of Stateful Inspection Firewall?

High Performance

Security

Transparency

All of the above

Auditing is the process of tracking ________________________ on a system.

events

errors

access

authentication

All the above

What is the sequence in which the rules are executed in the Rule Base?

From the bottom of the rule base to the top of the rule base

From the top of the rule base to the bottom of the rule base

Random

According to the priority

Suppose Adrian is the Network Security Engineer for ABC Company. He is asked by his manager to create a security policy in the Firewalls to open the HTTP service for a host_A(192.168.1.2) so that host_A may be able to access the Web Server(172.16.0.2). NAT rule already exists for the host. How will Adrian create the security policy in the Firewalls?

Source: Web_Server(172.16.0.2), Destination(192.168.1.2): host_A, Service: HTTP(80), Action :Accept

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: HTTP(80), Action :Reject

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: SMTP(25), Action :Accept

Source: Host_A(192.168.1.2), Destination:Web_Server(172.16.0.2), Service: HTTP(80), Action :Accept

None of the above

Which command is used to determine the route taken by a Packet?

netstat

ipconfig

ifconfig

traceroute

Syslog protocol is used for __________.

managing the Firewall

event notification

encryption

VPN

State whether True or False.

When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

True

False

Which Packet is sent by the source to initiate the connection in TCP 3-way handshake?

SYN

SYN/ACK

ACK

All of the above

You are asked by your manager to publish a web server.

Which type of NATing will you use so that the Web Server can be accessed from the Internet?

Static NAT

Dynamic NAT

Source based NAT

Destination based NAT

Quiz:	Firewall Concepts Quiz # 4
Subject:	Basic Firewall Concepts
Total Questions:	30 MCQs
Time:	30 Minutes

Firewall Concepts Quiz # 4

Which of the following are hash algorithms?

What is the mode of operation of Firewalls?

The______________ TCP flag can launch a DoS attack.

Which layer of the OSI model is used by Packet filtering?

What exactly is a DoS?

What exactly is spoofing?

Which of the following things should be kept in mind while troubleshooting the Firewall problems?

Over which of the following can a VPN be established?

What are the functions of a Desktop Firewall?

Which of the following ports is used by IMAP?

What is the action on Packet when we apply the action, REJECT?

What exactly is the Stateful Packet Filtering?

Which of the following are the functions of a Firewall?

Generally, a Firewall can not be managed by which of the following:

Suppose Eric is a Network Security Engineer in ABC Company. He is asked by his manager to block the access to unauthorized web sites being accessed by the users of the company. Can these unauthorized web sites be blocked with the Firewalls?

What does sniffing mean?

Which type of Firewalls keep a track on the state of the connection?

At which layer does the Circuit-Level Firewall work?

Which zone is the un-trusted zone in Firewalls architecture?

What are the advantages of Stateful Inspection Firewall?

Auditing is the process of tracking ________________________ on a system.

What is the sequence in which the rules are executed in the Rule Base?

Which command is used to determine the route taken by a Packet?

Syslog protocol is used for __________.

State whether True or False.When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

Which Packet is sent by the source to initiate the connection in TCP 3-way handshake?

You are asked by your manager to publish a web server.Which type of NATing will you use so that the Web Server can be accessed from the Internet?

State whether True or False.

When a rule is matched for a particular incoming/outgoing Packet and is executed, the Firewalls look for another rule in the rule base for the same Packet.

You are asked by your manager to publish a web server.

Which type of NATing will you use so that the Web Server can be accessed from the Internet?