DCOM 211 Midterm Test quizzes and answers 2024

Firewalls can not protect data within an organization between departments or subnets. Firewalls only protect the data from internet attacks - False An example of a Host-Based Firewall. - Microsoft Internet Connection Firewall (ICF A SYN attack is a _________ attack type - Distributed Denial of Service (DDOS) Determination of a firewall requirement would be - to perform an Annual Loss Expectancy (ALE) A vulnerability that is exploited the same day it was discovered. - zero-day attack An access control policy enforcement point. - Firewall Sequence numbers, checksums, data flags, payload information, etc... - Packet header information Connection less session - Internet Control Message Protocol (ICMP). A firewall would permit malware to succesfully pass through to the production network when attached to "permitted" data. - True The 1st step in data protection would be to determine the network flow direction. - True Dependant upon the type of firewall, actions taken by firewalls include: (Choose all that apply) - Block Packets Allow Packets Restrict Packet Motives are solely isolated to a cybe attacker who desires to compormise a system whether it is a targeted system or untargeted system - False Network Address Translation (NAT) : (Choose all that apply) - Allows use of "Private" Addresses on the internal network. Large internal networks can operate with only a few "Public" Addresses No need to re-number internal networks, if set up per IETF RFC-1918 One-to-One or Many-to-One translation The firewall can "translate" internal "Private" Addresses to "Public" Addresses before sending them out to the Internet, "hiding" the internal addresses Advantages of Circuti Proxy Firewalls: (Choose all that apply): - More control than a Packet Filter SOCKS 5 allow optional user authentication & encryption Client has no way to learn the server IP address Packet Inspection is the process of - intercepting & processing the data in a packet to determine if it should be permitted or denied. A firewall might protect the network and data from attack vectors that initate from the Internet. - True Fire Wall Authentication refers to: - Username & ID password Simple process of presenting a notification to the console. - Console notification Could be used to generate traps that are sent to a network management system (NMS) that is monitoring a firewall. - Simple Network Management Protocol (SNMP) notification When an event occurs, the firewall could be configured to send a page to an administrator. - Paging notification