Quiz. Module 09 Network Security
Appliances and Technologies
Which of the following is NOT a firewall rule parameter? - answer Visibility
Which firewall rule action implicitly denies all other traffic unless explicitly allowed? -
answer Allow
Leah is researching information on firewalls. She needs a firewall that allows for more
generic statements instead of creating specific rules. What type of firewall should Leah
consider purchasing that supports her need? - answer Policy-based firewall
Emilie is reviewing a log file of a new firewall. She notes that the log indicates packets
are being dropped for incoming packets for which the internal endpoint did not initially
create the request. What kind of firewall is this? - answer Stateful packet filtering
What is a virtual firewall? – answer d. A firewall that runs in the cloud
Which of these appliances provides the broadest protection by combining several
security functions? - answerUTM
Which of the following contains honeyfiles and fake telemetry? - answera. High-
interaction honeypot
Maja has been asked to investigate DDoS mitigations. Which of the following should
Maja consider? - answerd. DNS sinkhole
Which type of monitoring methodology looks for statistical deviations from a baseline? -
answerb. Anomaly monitoring
Which statement regarding a demilitarized zone (DMZ) is NOT true? - answerd. It
contains servers that are used only by internal network users.
Which of the following functions does a network hardware security module NOT
perform? - answerb. Fingerprint authentication
Which of these is NOT used in scheduling a load balancer? - answera. Data within the
application message itself
In which of the following configurations are all the load balancers always active? -
answerc. Active-active
Appliances and Technologies
Which of the following is NOT a firewall rule parameter? - answer Visibility
Which firewall rule action implicitly denies all other traffic unless explicitly allowed? -
answer Allow
Leah is researching information on firewalls. She needs a firewall that allows for more
generic statements instead of creating specific rules. What type of firewall should Leah
consider purchasing that supports her need? - answer Policy-based firewall
Emilie is reviewing a log file of a new firewall. She notes that the log indicates packets
are being dropped for incoming packets for which the internal endpoint did not initially
create the request. What kind of firewall is this? - answer Stateful packet filtering
What is a virtual firewall? – answer d. A firewall that runs in the cloud
Which of these appliances provides the broadest protection by combining several
security functions? - answerUTM
Which of the following contains honeyfiles and fake telemetry? - answera. High-
interaction honeypot
Maja has been asked to investigate DDoS mitigations. Which of the following should
Maja consider? - answerd. DNS sinkhole
Which type of monitoring methodology looks for statistical deviations from a baseline? -
answerb. Anomaly monitoring
Which statement regarding a demilitarized zone (DMZ) is NOT true? - answerd. It
contains servers that are used only by internal network users.
Which of the following functions does a network hardware security module NOT
perform? - answerb. Fingerprint authentication
Which of these is NOT used in scheduling a load balancer? - answera. Data within the
application message itself
In which of the following configurations are all the load balancers always active? -
answerc. Active-active
