SECURITY IN NETWORK DESIGN CHAPTER 10
MOCK EXAM WITH ANSWER RATIONALES
2026
◉ Reverse Proxy.
Answer: — Provides services to Internet clients from servers on its
own network
— Provides identity protection for the server rather than the client
— Useful when multiple web servers are accessed through the same
public IP address
◉ ACL (Access Control List).
Answer: — Acts like a filter to instruct the router certain packets
depending on their content.
— Acts like a filter to instruct the router to permit or deny traffic
according to the Network layer, Transport layer, source IP,
destination IP, or TCP/UDP port number.
— Is not automatically installed on a router.
◉ Implicit Deny Rule.
,Answer: Ensures that any traffic the ACL does not explicitly permit is
denied by default.
◉ Access-List Command.
Answer: Used to assign a statement to an already installed ACL
◉ Any Command.
Answer: Is equivalent to using a wildcard mask of 255.255.255.255
which allows all IP addresses to pass through.
◉ Network-based Firewall.
Answer: A firewall placed on the edge of a private network that
monitors the connections between a private network and a public
network (such as the Internet).
Protects an entire private network.
◉ Host-Based Firewall.
Answer: Only protects the computer on which they are installed.
◉ Packet-Filtering Firewall.
, Answer: — A network device or application that examines the
header of every packet of data it receives on any of its interfaces
(called inbound traffic).
— Refers to it's ACL to determine whether that destination is on the
internal LAN or on an external network.
◉ Content-Filtering Firewalls.
Answer: Can block designated types of traffic based on application
data contained within packets.
◉ Stateful Firewall.
Answer: Able to inspect each incoming packet to determine whether
it belongs to a currently active connection (called a stateful
inspection) and is therefore a legitimate packet.
◉ Stateless Firewall.
Answer: Manages each incoming packet as a stand-alone entity
without regard to currently active connections
◉ iptables.
Answer: The software firewall that is included with most Linux
distributions.
MOCK EXAM WITH ANSWER RATIONALES
2026
◉ Reverse Proxy.
Answer: — Provides services to Internet clients from servers on its
own network
— Provides identity protection for the server rather than the client
— Useful when multiple web servers are accessed through the same
public IP address
◉ ACL (Access Control List).
Answer: — Acts like a filter to instruct the router certain packets
depending on their content.
— Acts like a filter to instruct the router to permit or deny traffic
according to the Network layer, Transport layer, source IP,
destination IP, or TCP/UDP port number.
— Is not automatically installed on a router.
◉ Implicit Deny Rule.
,Answer: Ensures that any traffic the ACL does not explicitly permit is
denied by default.
◉ Access-List Command.
Answer: Used to assign a statement to an already installed ACL
◉ Any Command.
Answer: Is equivalent to using a wildcard mask of 255.255.255.255
which allows all IP addresses to pass through.
◉ Network-based Firewall.
Answer: A firewall placed on the edge of a private network that
monitors the connections between a private network and a public
network (such as the Internet).
Protects an entire private network.
◉ Host-Based Firewall.
Answer: Only protects the computer on which they are installed.
◉ Packet-Filtering Firewall.
, Answer: — A network device or application that examines the
header of every packet of data it receives on any of its interfaces
(called inbound traffic).
— Refers to it's ACL to determine whether that destination is on the
internal LAN or on an external network.
◉ Content-Filtering Firewalls.
Answer: Can block designated types of traffic based on application
data contained within packets.
◉ Stateful Firewall.
Answer: Able to inspect each incoming packet to determine whether
it belongs to a currently active connection (called a stateful
inspection) and is therefore a legitimate packet.
◉ Stateless Firewall.
Answer: Manages each incoming packet as a stand-alone entity
without regard to currently active connections
◉ iptables.
Answer: The software firewall that is included with most Linux
distributions.
