C836 Opening Exam Questions with
100% Correct Answers.
packet filtering
looks at the contents of each packet in the traffic individually and makes a gross
determination, based on the source and destination IP addresses, the port number, and the
protocol being used, of whether the traffic will be allowed to pass.
Since each packet is examined individually and not in concert with the rest of the packets
comprising the content of the traffic, it can be possible to slip attacks through this type of
firewall.
stateful packet inspection
like packet filtering but able to keep track of traffic on a granular level
will only allow traffic through that is part of a new or already established connection
knows when the connection has been closed and further traffic should not legitimately be present
deep packet inspection
capable of analyzing the actual content of the traffic that is flowing through them
proxy servers
serve as a choke point in order to allow us to filter traffic for attacks or undesirable content
such as malware or traffic to Web sites hosting adult content
DMZ (demilitarized zone)
layer of protection between the device, such as our mail server, and the Internet, and between
the rest of our network and the device
Signature based IDses
, They maintain a database of the signatures that might signal a particular type of attack
and compare incoming traffic to those signatures
works well, except when we encounter an attack that is new, or has been specifically constructed
in order to not match existing attack signatures
Anomaly-based IDSes
work by taking a baseline of the normal traffic and activity taking place on the network.
They can measure the present state of traffic on the network against this baseline in order to
detect patterns that are not present in the traffic normally.
virtual private networks (VPNs)
can provide us with a solution for sending sensitive traffic over unsecure networks
it's an encrypted "tunnel"
WPA2 (Wi-Fi Protected Access Version 2)
Strongest current form of wireless encryption (802.11 devices)
FTP (File Transfer Protocol)
A protocol used to move files and folders over a network or the Internet.
SSH or SFTP can also be used
Post Office Protocol (POP)
A protocol used to retrieve email from a mail server.
SSH (Secure Shell)
handy protocol for securing communications as we can send many types of traffic over it. It
can be used for file transfers and terminal access, as we mentioned, and to secure traffic in a
variety of other situations, such as when connecting to a remote desktop, communicating over a
VPN, mounting remote file systems, and any number of other tasks.
100% Correct Answers.
packet filtering
looks at the contents of each packet in the traffic individually and makes a gross
determination, based on the source and destination IP addresses, the port number, and the
protocol being used, of whether the traffic will be allowed to pass.
Since each packet is examined individually and not in concert with the rest of the packets
comprising the content of the traffic, it can be possible to slip attacks through this type of
firewall.
stateful packet inspection
like packet filtering but able to keep track of traffic on a granular level
will only allow traffic through that is part of a new or already established connection
knows when the connection has been closed and further traffic should not legitimately be present
deep packet inspection
capable of analyzing the actual content of the traffic that is flowing through them
proxy servers
serve as a choke point in order to allow us to filter traffic for attacks or undesirable content
such as malware or traffic to Web sites hosting adult content
DMZ (demilitarized zone)
layer of protection between the device, such as our mail server, and the Internet, and between
the rest of our network and the device
Signature based IDses
, They maintain a database of the signatures that might signal a particular type of attack
and compare incoming traffic to those signatures
works well, except when we encounter an attack that is new, or has been specifically constructed
in order to not match existing attack signatures
Anomaly-based IDSes
work by taking a baseline of the normal traffic and activity taking place on the network.
They can measure the present state of traffic on the network against this baseline in order to
detect patterns that are not present in the traffic normally.
virtual private networks (VPNs)
can provide us with a solution for sending sensitive traffic over unsecure networks
it's an encrypted "tunnel"
WPA2 (Wi-Fi Protected Access Version 2)
Strongest current form of wireless encryption (802.11 devices)
FTP (File Transfer Protocol)
A protocol used to move files and folders over a network or the Internet.
SSH or SFTP can also be used
Post Office Protocol (POP)
A protocol used to retrieve email from a mail server.
SSH (Secure Shell)
handy protocol for securing communications as we can send many types of traffic over it. It
can be used for file transfers and terminal access, as we mentioned, and to secure traffic in a
variety of other situations, such as when connecting to a remote desktop, communicating over a
VPN, mounting remote file systems, and any number of other tasks.
