CISA COMPREHENSIVE TEST EXAM 2 2026
QUESTIONS WITH ANSWERS GRADED A+
◉ DISADV of circuit-level gateway. Answer: • Security of this firewall
depends heavily on the trustworthiness of the hosts, as individual
packets aren't analyzed after the connection is made.
• Limited logging
◉ A stateful inspection firewall. Answer: is a type of circuit level
gateway that captures data packets at the network layer then
reviews these packets at the upper layers of the OSI model. To beef
up packet filtering security, stateful inspection packet filtering, or
stateful packet filtering (SPF) was introduced. Essentially, SPF
performs the same as a packet filter, but with a couple of added
measures. First, it looks at more details from each packet to
determine what is contained within the packet rather than simply
who and where it is from (or allegedly from). Second, it monitors
communications between the two devices and compares the traffic
not only to the rules it has been given, but also to the previous
communications. If any communication seems out of context or out
of the ordinary based on previous traffic the packet is rejected.
◉ An application gateway. Answer: is essentially another sort of
proxy server. The internal client first establishes a connection with
the application gateway. The application gateway determines if the
connection should be allowed or not and then establishes a
,connection with the destination computer. All communications go
through two connections- client to application gateway and
application gateway to destination. The application gateway
monitors all traffic against its rules before deciding whether or not
to forward it. As with the other proxy server types, the application
gateway is the only address seen by the outside world so the internal
network is protected.
◉ ADV of Application Gateway. Answer: • An application-level
gateway is the best way to protect against hacking because it can
define with detail rules that describe the type of user or connection
that is or is not permitted. It analyzes in detail each package, not
only in layers one through four of the OSI model but also layers five
through seven, which means that it reviews the commands of each
higher level protocol (HTTP, FTP, SNMP, etc.)
• It hides the design of the internal network
• It can be used to implement strong authentication.
◉ DISADV of Application Gateway. Answer: • It reduces network
performance.
• It must be tailored to specific applications.
◉ For a remote access server. Answer: there is a device (server) that
asks for a username and password before entering the network. This
is good when accessing private networks, but it can be mapped or
scanned from the Internet creating security exposure.
, ◉ A proxy server. Answer: is generally put in place to boost
performance of the network, but can act as a sort of firewall as well.
Proxy servers also hide your internal addresses as well so that all
communications appear to originate from the proxy server itself. A
proxy server will cache pages that have been requested. If User A
goes to Yahoo.com the proxy server actually sends the request to
Yahoo.com and retrieves the web page. If User B then connects to
Yahoo.com the proxy server just sends the information it already
retrieved for User A so it is returned much faster than having to get
it from Yahoo.com again. You can configure a proxy server to block
access to certain web sites and filter certain port traffic to protect
your internal network.
◉ Proxy servers. Answer: can provide protection based on the IP
address and ports. However, an individual is needed who really
knows how to do this, and applications can use different ports for
the different sections of the program.
◉ Port scanning. Answer: works when there is a very specific task to
complete, but not when trying to control what comes from the
Internet (or when all the ports available need to be controlled). For
example, the port for Ping (echo request) could be blocked and the
IP addresses would be available for the application and browsing,
but would not respond to Ping.
◉ Firewall Architectures. Answer:
QUESTIONS WITH ANSWERS GRADED A+
◉ DISADV of circuit-level gateway. Answer: • Security of this firewall
depends heavily on the trustworthiness of the hosts, as individual
packets aren't analyzed after the connection is made.
• Limited logging
◉ A stateful inspection firewall. Answer: is a type of circuit level
gateway that captures data packets at the network layer then
reviews these packets at the upper layers of the OSI model. To beef
up packet filtering security, stateful inspection packet filtering, or
stateful packet filtering (SPF) was introduced. Essentially, SPF
performs the same as a packet filter, but with a couple of added
measures. First, it looks at more details from each packet to
determine what is contained within the packet rather than simply
who and where it is from (or allegedly from). Second, it monitors
communications between the two devices and compares the traffic
not only to the rules it has been given, but also to the previous
communications. If any communication seems out of context or out
of the ordinary based on previous traffic the packet is rejected.
◉ An application gateway. Answer: is essentially another sort of
proxy server. The internal client first establishes a connection with
the application gateway. The application gateway determines if the
connection should be allowed or not and then establishes a
,connection with the destination computer. All communications go
through two connections- client to application gateway and
application gateway to destination. The application gateway
monitors all traffic against its rules before deciding whether or not
to forward it. As with the other proxy server types, the application
gateway is the only address seen by the outside world so the internal
network is protected.
◉ ADV of Application Gateway. Answer: • An application-level
gateway is the best way to protect against hacking because it can
define with detail rules that describe the type of user or connection
that is or is not permitted. It analyzes in detail each package, not
only in layers one through four of the OSI model but also layers five
through seven, which means that it reviews the commands of each
higher level protocol (HTTP, FTP, SNMP, etc.)
• It hides the design of the internal network
• It can be used to implement strong authentication.
◉ DISADV of Application Gateway. Answer: • It reduces network
performance.
• It must be tailored to specific applications.
◉ For a remote access server. Answer: there is a device (server) that
asks for a username and password before entering the network. This
is good when accessing private networks, but it can be mapped or
scanned from the Internet creating security exposure.
, ◉ A proxy server. Answer: is generally put in place to boost
performance of the network, but can act as a sort of firewall as well.
Proxy servers also hide your internal addresses as well so that all
communications appear to originate from the proxy server itself. A
proxy server will cache pages that have been requested. If User A
goes to Yahoo.com the proxy server actually sends the request to
Yahoo.com and retrieves the web page. If User B then connects to
Yahoo.com the proxy server just sends the information it already
retrieved for User A so it is returned much faster than having to get
it from Yahoo.com again. You can configure a proxy server to block
access to certain web sites and filter certain port traffic to protect
your internal network.
◉ Proxy servers. Answer: can provide protection based on the IP
address and ports. However, an individual is needed who really
knows how to do this, and applications can use different ports for
the different sections of the program.
◉ Port scanning. Answer: works when there is a very specific task to
complete, but not when trying to control what comes from the
Internet (or when all the ports available need to be controlled). For
example, the port for Ping (echo request) could be blocked and the
IP addresses would be available for the application and browsing,
but would not respond to Ping.
◉ Firewall Architectures. Answer:
