Sec301 Review Rated A+

What is breaking up a network for better management known as? A. Network Division B. Segmentation C. Departmental Organization D. Compartmentalization Segmentation What is breaking a network into security zones called? A. Network Division B. Segmentation C. Departmental Organization D. Compartmentalization Compartmentalization What is the most fundamental purpose of a firewall? A. Controlling where internal users are allowed to go on the Internet. B. To keep the person off your network tat does not belong there. C. Performing Network Address Translation (NAT) D. Compartmentalization To keep the person off your network tat does not belong there. What mechanism do you use to dictate what traffic is allowed and what traffic is denied? A. Every firewall is different B. Written Policy C. Firewall Rules nursing D. Firewalls do this automatically Firewall Rules Which traffic type goes through a proxy firewall? A. Any traffic allowed by the firewall rules B. Traffic from inside the network to the Internet C. Network Address Translated traffic D. No traffic goes through a proxy No traffic goes through a proxy Which traffic type goes through a stateful inspection firewall? A. Any traffic allowed by the firewall rules B. Traffic from inside the network to the Internet C. Network Address Translated Traffic D. No traffic goes through a stateful inspection firewall Any traffic allowed by the firewall rules What is the underlying core technology behind stateful inspection? A. Proxying B. Packet Filtering C. Network Address Translation D. Stateful inspection is its own technology Packet Filtering What type of systems do you put in the DMZ? A. A DMZ has no servers, just client PCs nursing B. Servers with sensitive data only C. Firewalls D. Public Access Systems Public Access Systems When is it justified to put public access servers on an internal network? A. Never B. As long as they are fully patched C. When that is the most convenient way to access them D. We always do that Never What is the acronym for an automated system that watches for signs of an attack called? A. DNS B. IPS C. ISP D. IDS IDS When an IDS watches for patterns of an attack in packets, what is it doing? A. Signature Analysis B. Intrusion Detection and Prevention (IDP) C. You can't do that D. Anomaly analysis Signature Analysis nursing