CISSP Exam Collection - Part 4 EXAM
NEWEST ACTUAL EXAM COMPLETE
350 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED
A+||BRAND NEW VERSION 2026!!!
QUESTIONm450
WhichmofmthemfollowingmNATmfirewallmtranslationmmodesmoffersmnomprotectionmfrommhackingmatta
cksmtomanminternalmhostmusingmthismfunctionality?
A.
B.
C.
D.
Networkmredundancymtranslation
Loadmbalancingmtranslation
Dynamicmtranslation
Staticmtranslationm-mCORRECTmANSWERmCORRECTmANSWER:mD
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Staticmtranslationm(alsomcalledmportmforwarding),massignsmamfixedmaddressmtomamspecificminternalmn
etworkmresourcem(usuallymamserver).
StaticmNATmismrequiredmtommakeminternalmhostsmavailablemformconnectionmfrommexternalmhosts.
Itmmerelymreplacesmportminformationmonmamone-to-
onembasis.mThismaffordsmnomprotectionmtomstatisticallymtranslatedmhosts:mhackingmattacksmwillmbemj
ustmasmefficiently
translatedmasmanymothermvalidmconnectionmattempt.
,NOTEmFROMmCLEMENT:
HidingmNatmormOverloadedmNatmismwhenmyoumhavemamgroupmofmusersmbehindmamuniquempublicmIPm
address.mThismwillmprovidemyoumwithmsomemsecuritymthroughmobscurity
wheremanmattackermscanningmyourmnetworkmwouldmseemthemuniquemIPmaddressmonmthemoutsidemof
mthemgatewaymbutmcouldmnotmtellmifmtheremismonemuser,mtenmusers,mor
hundredsmofmusersmbehindmthatmIP.
NATmwasmNEVERmbuiltmasmamsecuritymmechanism.
InmthemcasemofmStaticmNATmusedmformsomemofmyourmserversmformexample,myourmwebmservermprivate
mIPmismmapmtomamvalidmexternalmpublicmIPmonmamonemonmonembasis,myour
SMTPmservermprivatemIPmismmappedmtomamstaticmpublicmIP,mandmsomon.
IfmanmattackermscanmthemIPmaddressmrangemonmthemexternalmsidemofmthemgatewaymhemwouldmdiscov
ermeverymsinglemonemofmyourmserversmormanymothermhostsmusingmstatic
natting.mPortsmthatmaremopen,mservicesmthatmaremlistening,mandmallmofmthisminfomcouldmbemgathered
mjustmasmifmthemservermwasminmfactmusingmampublicmIP.mItmdoesmnotmprovide
thismsecuritymthroughmobscuritymmentionedmabove.
Allmofmthemothermanswermaremincorrect.
Referencemusedmformthismquestion:
STREBE,mMatthewmandmPERKINS,mCharles,mFirewallsm24seven,mSybexm2000,mChapterm7:mNetworkm
AddressmTranslation.
QUESTIONm451
Whichmofmthemfollowingmismthemprimarymsecuritymfeaturemofmamproxymserver?
A.
B.
C.
D.
VirusmDetection
URLmblocking
,Routemblocking
Contentmfilteringm-mCORRECTmANSWERmCORRECTmANSWER:mD
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Inmmanymorganizations,mthemHTTPmproxymismusedmasmammeansmtomimplementmcontentmfiltering,mfor
minstance,mbymloggingmormblockingmtrafficmthatmhasmbeenmdefinedmas,mormis
assumedmtombemnonbusinessmrelatedmformsomemreason.
Althoughmfilteringmonmamproxymservermormfirewallmasmpartmofmamlayeredmdefensemcanmbemquitemeffe
ctivemtomprevent,mforminstance,mvirusminfectionsm(thoughmitmshouldmnevermbe
themonlymprotectionmagainstmviruses),mitmwillmbemonlymmoderatelymeffectiveminmpreventingmaccessm
tomunauthorizedmservicesm(suchmasmcertainmremote-accessmservicesmormfile
sharing),masmwellmasmpreventingmthemdownloadmofmunwantedmcontent.mHTTPmTunneling.
HTTPmtunnelingmismtechnicallymammisusemofmthemprotocolmonmthempartmofmthemdesignermofmsuchmtu
nnelingmapplications.mItmhasmbecomemampopularmfeaturemwithmthemrisemofmthe
firstmstreamingmvideomandmaudiomapplicationsmandmhasmbeenmimplementedmintommanymapplicatio
nsmthatmhavemammarketmneedmtombypassmusermpolicymrestrictions.
Usually,mHTTPmtunnelingmismappliedmbymencapsulatingmoutgoingmtrafficmfrommanmapplicationminman
mHTTPmrequestmandmincomingmtrafficminmamresponse.mThismismusuallymnot
donemtomcircumventmsecurity,mbutmrather,mtombemcompatiblemwithmexistingmfirewallmrulesmandmallo
wmanmapplicationmtomfunctionmthroughmamfirewallmwithoutmthemneedmtomapply
specialmrules,mormadditionalmconfigurations.
Themfollowingmaremincorrectmchoices:
VirusmDetectionmAmproxymismnotmbestmatmdetectionmmalwaremandmvirusesmwithinmcontent.mAmantivi
rusmproductmwouldmbemusemformthatmpurpose.
URLmblockingmThismwouldmbemamsubsetmofmProxying,mbasedmonmthemcontentmsomemURL'smmaymbem
blockedmbymthemproxymbutmitmismnotmdoingmfilteringmbasedmonmURL
addressesmonly.mThismismnotmthemBESTmanswer.
RoutemblockingmThismismamfunctionmthatmwould
, QUESTIONm452
Whichmofmthemfollowingmismanmadvantagemofmproxies?
A.
B.
C.
D.
Proxiesmprovidemamsinglempointmofmaccess,mcontrol,mandmlogging.
Proxiesmmustmexistmformeachmservice.
Proxiesmcreatemamsinglempointmofmfailure.
Proxiesmdomnotmprotectmthembasemoperatingmsystem.m-
mCORRECTmANSWERmCORRECTmANSWER:mA
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Bymensuringmthatmallmcontentmflowsmthroughmamsinglempoint,mproxiesmprovidemamcheckpointmformne
tworkmdata,mwhichmismanmadvantagemrathermthanmamliability,masmaremother
choices.
Source:mSTREBE,mMatthewmandmPERKINS,mCharles,mFirewallsm24seven,mSybexm2000,mChapterm8:
Application-LevelmProxies.
QUESTIONm453
WhichmofmthemfollowingmpacketsmshouldmNOTmbemdroppedmatmamfirewallmprotectingmanmorganizati
on'sminternalmnetwork?
A.
B.
C.
NEWEST ACTUAL EXAM COMPLETE
350 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED
A+||BRAND NEW VERSION 2026!!!
QUESTIONm450
WhichmofmthemfollowingmNATmfirewallmtranslationmmodesmoffersmnomprotectionmfrommhackingmatta
cksmtomanminternalmhostmusingmthismfunctionality?
A.
B.
C.
D.
Networkmredundancymtranslation
Loadmbalancingmtranslation
Dynamicmtranslation
Staticmtranslationm-mCORRECTmANSWERmCORRECTmANSWER:mD
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Staticmtranslationm(alsomcalledmportmforwarding),massignsmamfixedmaddressmtomamspecificminternalmn
etworkmresourcem(usuallymamserver).
StaticmNATmismrequiredmtommakeminternalmhostsmavailablemformconnectionmfrommexternalmhosts.
Itmmerelymreplacesmportminformationmonmamone-to-
onembasis.mThismaffordsmnomprotectionmtomstatisticallymtranslatedmhosts:mhackingmattacksmwillmbemj
ustmasmefficiently
translatedmasmanymothermvalidmconnectionmattempt.
,NOTEmFROMmCLEMENT:
HidingmNatmormOverloadedmNatmismwhenmyoumhavemamgroupmofmusersmbehindmamuniquempublicmIPm
address.mThismwillmprovidemyoumwithmsomemsecuritymthroughmobscurity
wheremanmattackermscanningmyourmnetworkmwouldmseemthemuniquemIPmaddressmonmthemoutsidemof
mthemgatewaymbutmcouldmnotmtellmifmtheremismonemuser,mtenmusers,mor
hundredsmofmusersmbehindmthatmIP.
NATmwasmNEVERmbuiltmasmamsecuritymmechanism.
InmthemcasemofmStaticmNATmusedmformsomemofmyourmserversmformexample,myourmwebmservermprivate
mIPmismmapmtomamvalidmexternalmpublicmIPmonmamonemonmonembasis,myour
SMTPmservermprivatemIPmismmappedmtomamstaticmpublicmIP,mandmsomon.
IfmanmattackermscanmthemIPmaddressmrangemonmthemexternalmsidemofmthemgatewaymhemwouldmdiscov
ermeverymsinglemonemofmyourmserversmormanymothermhostsmusingmstatic
natting.mPortsmthatmaremopen,mservicesmthatmaremlistening,mandmallmofmthisminfomcouldmbemgathered
mjustmasmifmthemservermwasminmfactmusingmampublicmIP.mItmdoesmnotmprovide
thismsecuritymthroughmobscuritymmentionedmabove.
Allmofmthemothermanswermaremincorrect.
Referencemusedmformthismquestion:
STREBE,mMatthewmandmPERKINS,mCharles,mFirewallsm24seven,mSybexm2000,mChapterm7:mNetworkm
AddressmTranslation.
QUESTIONm451
Whichmofmthemfollowingmismthemprimarymsecuritymfeaturemofmamproxymserver?
A.
B.
C.
D.
VirusmDetection
URLmblocking
,Routemblocking
Contentmfilteringm-mCORRECTmANSWERmCORRECTmANSWER:mD
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Inmmanymorganizations,mthemHTTPmproxymismusedmasmammeansmtomimplementmcontentmfiltering,mfor
minstance,mbymloggingmormblockingmtrafficmthatmhasmbeenmdefinedmas,mormis
assumedmtombemnonbusinessmrelatedmformsomemreason.
Althoughmfilteringmonmamproxymservermormfirewallmasmpartmofmamlayeredmdefensemcanmbemquitemeffe
ctivemtomprevent,mforminstance,mvirusminfectionsm(thoughmitmshouldmnevermbe
themonlymprotectionmagainstmviruses),mitmwillmbemonlymmoderatelymeffectiveminmpreventingmaccessm
tomunauthorizedmservicesm(suchmasmcertainmremote-accessmservicesmormfile
sharing),masmwellmasmpreventingmthemdownloadmofmunwantedmcontent.mHTTPmTunneling.
HTTPmtunnelingmismtechnicallymammisusemofmthemprotocolmonmthempartmofmthemdesignermofmsuchmtu
nnelingmapplications.mItmhasmbecomemampopularmfeaturemwithmthemrisemofmthe
firstmstreamingmvideomandmaudiomapplicationsmandmhasmbeenmimplementedmintommanymapplicatio
nsmthatmhavemammarketmneedmtombypassmusermpolicymrestrictions.
Usually,mHTTPmtunnelingmismappliedmbymencapsulatingmoutgoingmtrafficmfrommanmapplicationminman
mHTTPmrequestmandmincomingmtrafficminmamresponse.mThismismusuallymnot
donemtomcircumventmsecurity,mbutmrather,mtombemcompatiblemwithmexistingmfirewallmrulesmandmallo
wmanmapplicationmtomfunctionmthroughmamfirewallmwithoutmthemneedmtomapply
specialmrules,mormadditionalmconfigurations.
Themfollowingmaremincorrectmchoices:
VirusmDetectionmAmproxymismnotmbestmatmdetectionmmalwaremandmvirusesmwithinmcontent.mAmantivi
rusmproductmwouldmbemusemformthatmpurpose.
URLmblockingmThismwouldmbemamsubsetmofmProxying,mbasedmonmthemcontentmsomemURL'smmaymbem
blockedmbymthemproxymbutmitmismnotmdoingmfilteringmbasedmonmURL
addressesmonly.mThismismnotmthemBESTmanswer.
RoutemblockingmThismismamfunctionmthatmwould
, QUESTIONm452
Whichmofmthemfollowingmismanmadvantagemofmproxies?
A.
B.
C.
D.
Proxiesmprovidemamsinglempointmofmaccess,mcontrol,mandmlogging.
Proxiesmmustmexistmformeachmservice.
Proxiesmcreatemamsinglempointmofmfailure.
Proxiesmdomnotmprotectmthembasemoperatingmsystem.m-
mCORRECTmANSWERmCORRECTmANSWER:mA
Section:mCommunicationmandmNetworkmSecurity
Explanation
Explanation/Reference:
Bymensuringmthatmallmcontentmflowsmthroughmamsinglempoint,mproxiesmprovidemamcheckpointmformne
tworkmdata,mwhichmismanmadvantagemrathermthanmamliability,masmaremother
choices.
Source:mSTREBE,mMatthewmandmPERKINS,mCharles,mFirewallsm24seven,mSybexm2000,mChapterm8:
Application-LevelmProxies.
QUESTIONm453
WhichmofmthemfollowingmpacketsmshouldmNOTmbemdroppedmatmamfirewallmprotectingmanmorganizati
on'sminternalmnetwork?
A.
B.
C.
