CNIT 455 Exam I QUESTIONS WITH COMPLETE SOLUTIONS 100% VERIFIED

CNIT 455 Exam I QUESTIONS WITH COMPLETE SOLUTIONS 100% VERIFIED T/F A Packet Filter is hardware that limits connectivity - answerF (Software) Packet filters block _______ and ______ traffic - answeringress, egress Packet filters use ____ based filtering - answerrule Packet filter rules are combined into ________ - answerrulesets T/F A good practice with packet filters is to allow what you want then deny all else. - answerT A firewall always includes a ______ ______ - answerpacket filter T/F All packet filters are firewalls - answerF (Firewalls contain packet filters, not vice versa) T/F Windows firewall, iptables, and pfsense are examples of software "firewalls" - answerT T/F Packet filters are often used as a replacement in the IP stack on modern implementations. - answerF (uncommon) T/F Packet filters are often implemented as a specialized network device. - answerT One should always use __ rather than ___ when configuring a packet filter, as the latter is far easier to spoof. - answerIP, DNS When filtering by IP, one should control access based on the ______/__________ IP address. - answersource/destination T/F Packet filters are vulnerable to IP address spoofing via ARP. - answerT LSRR stands for - answerLoose Source Record Routing T/F LSRR tells packets specific routes to gain access to otherwise unreachable networks. - answerT T/F LSRR prevents machines from spoofing addresses. - answerF (Enables spoofing, as net traffic can still find the machine) T/F You should always enable LSRR on border routers and firewalls - answerF (DISABLE IT) UDP and TCP communication is based on numbered _____ - answerports T/F UDP and TCP source and destination ports are standardized. - answerF (only destination) UDP and TCP ______ ports are chosen randomly, from port ____ and above - answersource, 1024 The two types of port filtering are ______ and ________ - answerStatic, dynamic Static port filtering involves only allowing traffic based on ____ number or IP/____ number combination - answerport In static port filtering, each packet is checked _____________ - answerindependently Dynamic port filtering is also known as ________ ______ __________ - answerstateful packet inspecti