DCOM 211 Final UPDATED Actual Exam
Questions and CORRECT Answers
The Microsoft ISA Server 2004 Checklist has ____ tasks. - CORRECT ANSWER✔✔- 14
Application firewalls are the simplest to implement and the most intelligent firewall
architecture. - CORRECT ANSWER✔✔- False
Limitations of application proxy firewalls include the fact that - CORRECT ANSWER✔✔-
they are slower than packet filtering firewalls
they are only effective for proxying defined applications
Monitoring and reporting are some of the __________ aspects of firewall management. -
CORRECT ANSWER✔✔- less-elegant
Proxies that support the HTTP protocol can also cache data. - CORRECT ANSWER✔✔-
True
Microsoft ISA Server 2004 supports which of the following HTTP applicatin-filtering
options? - CORRECT ANSWER✔✔- File extension filtering
What is one special function that Microsoft ISA Server 2004 CANNOT perform? -
CORRECT ANSWER✔✔- Maintains a threat database
Rule Action - CORRECT ANSWER✔✔- This defines whether traffic should be allowed or
denied when the rule conditions are met.
Source - CORRECT ANSWER✔✔- This is where you define the source of the traffic that the
rule will apply to, typically an internal network.
Content types - CORRECT ANSWER✔✔- This is where you define the Multipurpose
Internet Mail Extensions (MIME) types and file extensions that the rule will apply to.
, Protocols - CORRECT ANSWER✔✔- These are where you specify protocols with Layer 3,
Layer 4, or any ICMP properties.
ISA Server 2004 can natively detect the following intrusion/attack attempt: - CORRECT
ANSWER✔✔- UDP bomb
Microsoft ISA Server 2004 supports ____ clients: one of which is SecureNAT - CORRECT
ANSWER✔✔- Three
Some good examples to mitigate instances of human error when using VLANs would be -
CORRECT ANSWER✔✔- Set trunking to off on all access ports
Limit the use of VLAN 1
The most important task of any firewall implementation takes placebefore the firewall itself
is ever configured - CORRECT ANSWER✔✔- True
The dual-firewall architecture is _______________ than single-firewall architecture. -
CORRECT ANSWER✔✔- more complex
A keynote speaker at BlackHat 2004 stated that the network firewall is the most important
part of a network. - CORRECT ANSWER✔✔- False
There is no practical limit to the number of DMZ segments that can be implemented with the
only real restrictionbeing the number of ____________ the firewall can physically or
logically support. - CORRECT ANSWER✔✔- interfaces
The most important thing to remember is that s firewall is not a device but s system of
devices. - CORRECT ANSWER✔✔- True
Dual-firewall architecture is typically implemented in environments such as - CORRECT
ANSWER✔✔- banking
Questions and CORRECT Answers
The Microsoft ISA Server 2004 Checklist has ____ tasks. - CORRECT ANSWER✔✔- 14
Application firewalls are the simplest to implement and the most intelligent firewall
architecture. - CORRECT ANSWER✔✔- False
Limitations of application proxy firewalls include the fact that - CORRECT ANSWER✔✔-
they are slower than packet filtering firewalls
they are only effective for proxying defined applications
Monitoring and reporting are some of the __________ aspects of firewall management. -
CORRECT ANSWER✔✔- less-elegant
Proxies that support the HTTP protocol can also cache data. - CORRECT ANSWER✔✔-
True
Microsoft ISA Server 2004 supports which of the following HTTP applicatin-filtering
options? - CORRECT ANSWER✔✔- File extension filtering
What is one special function that Microsoft ISA Server 2004 CANNOT perform? -
CORRECT ANSWER✔✔- Maintains a threat database
Rule Action - CORRECT ANSWER✔✔- This defines whether traffic should be allowed or
denied when the rule conditions are met.
Source - CORRECT ANSWER✔✔- This is where you define the source of the traffic that the
rule will apply to, typically an internal network.
Content types - CORRECT ANSWER✔✔- This is where you define the Multipurpose
Internet Mail Extensions (MIME) types and file extensions that the rule will apply to.
, Protocols - CORRECT ANSWER✔✔- These are where you specify protocols with Layer 3,
Layer 4, or any ICMP properties.
ISA Server 2004 can natively detect the following intrusion/attack attempt: - CORRECT
ANSWER✔✔- UDP bomb
Microsoft ISA Server 2004 supports ____ clients: one of which is SecureNAT - CORRECT
ANSWER✔✔- Three
Some good examples to mitigate instances of human error when using VLANs would be -
CORRECT ANSWER✔✔- Set trunking to off on all access ports
Limit the use of VLAN 1
The most important task of any firewall implementation takes placebefore the firewall itself
is ever configured - CORRECT ANSWER✔✔- True
The dual-firewall architecture is _______________ than single-firewall architecture. -
CORRECT ANSWER✔✔- more complex
A keynote speaker at BlackHat 2004 stated that the network firewall is the most important
part of a network. - CORRECT ANSWER✔✔- False
There is no practical limit to the number of DMZ segments that can be implemented with the
only real restrictionbeing the number of ____________ the firewall can physically or
logically support. - CORRECT ANSWER✔✔- interfaces
The most important thing to remember is that s firewall is not a device but s system of
devices. - CORRECT ANSWER✔✔- True
Dual-firewall architecture is typically implemented in environments such as - CORRECT
ANSWER✔✔- banking
