Northern Virginia Community College ITN 263 Chapter 5 -
Network Security Firewalls & VPNS || Verified for Accuracy.
A firewall is a filtering device that watches for traffic that fails to comply with rules defined by
the firewall administrator. What does the firewall inspect? correct answers Packet Header
Which of the following is a common firewall philosophy? correct answers Deny by default
Which of the following best describes a network chokepoint? correct answers A specialized kind
of gateway that focuses on traffic to a single concentrated pathway to streamline the process of
filtering.
What prevents firewall filtering? correct answers Encryption
Passive threats are those you must act upon to be harmed, such as clicking a link and
downloading infected content. An active threat, such as a hacker, seeks out vulnerable targets.
Which of the following is least effective against passive threats? correct answers A door lock
Hao is a network security engineer for a mid-sized company. She is redesigning the
infrastructure and its resources to provide greater protection from both external and internal
threats. She wants to place firewall devices not only where the local area network (LAN)
connects to the Internet, but also within the network. Although she doesn't suspect any
employees of misusing computer resources, there is always the potential that one might send
unauthorized emails or other messages containing confidential company information to a
competitor. Which redundant solution should she select that will be most likely to detect
malicious behavior by an internal employee? correct answers Host firewalls and firewalls at each
subnet
Charles is an IT help desk technician. He gets a ticket from a branch office saying that they lost
Internet connectivity. He investigates remotely over a backup maintenance link and determines
that this was done by design; the office's firewall deliberately severed the connection. Which of
the following does this functionality define? correct answers Bastion host
, Malika is a network engineer who is configuring firewalls separating both the Accounting and
HR departments from the rest of the business divisions on the local area network (LAN). She
wants to allow only certain traffic into those subnets from both internal employees and those
working from home. The traffic may include email, chat, and video conferencing. She wants to
prevent access to the company intranets to protect confidential employee and financial data. How
was she configured these firewalls? correct answers Filter
When setting up port forwarding on an external firewall to pass HTTP traffic from the Internet to
an internal web server, the external address and port are 204.40.235.38:8081. What is the internal
IP address and port, assuming the most common port for that protocol? correct answers
192.168.5.74:80
Rupesh is a network technician who has been tasked by his supervisor to configure the edge
firewall of an office branch. His task is to focus on outbound traffic based on several factors,
such as domain name, URL, file extension, and certain keywords. What is he configuring the
firewall to perform? correct answers Content filtering
Augustine is a network engineer for a mid-sized company. He needs to deploy a new firewall,
which was expensive to purchase and is complex to configure. In preparation for installation and
configuration, he attends training conducted by the firewall vendor. Which of the following types
of firewalls is he most likely planning to install? correct answers Commercial
Geraldine is a freelance network technician. She has been hired to design and build a small
office/home office (SOHO) network. She is considering what firewall solution to select, keeping
in mind that her client has a tight budget and the network is made up of no more than six nodes.
Which of the following is the best solution? correct answers Personal hardware firewall
integrated in the wireless access point or modem
Marcus is studying networking with an emphasis on cybersecurity at a local university. As part of
his research, he wants to visit certain hacker sites but is concerned that his laptop would be
vulnerable to passive threats while visiting them. He doesn't have the funds for expensive
security equipment. What is the least expensive option he has at hand? correct answers Native
firewall
Network Security Firewalls & VPNS || Verified for Accuracy.
A firewall is a filtering device that watches for traffic that fails to comply with rules defined by
the firewall administrator. What does the firewall inspect? correct answers Packet Header
Which of the following is a common firewall philosophy? correct answers Deny by default
Which of the following best describes a network chokepoint? correct answers A specialized kind
of gateway that focuses on traffic to a single concentrated pathway to streamline the process of
filtering.
What prevents firewall filtering? correct answers Encryption
Passive threats are those you must act upon to be harmed, such as clicking a link and
downloading infected content. An active threat, such as a hacker, seeks out vulnerable targets.
Which of the following is least effective against passive threats? correct answers A door lock
Hao is a network security engineer for a mid-sized company. She is redesigning the
infrastructure and its resources to provide greater protection from both external and internal
threats. She wants to place firewall devices not only where the local area network (LAN)
connects to the Internet, but also within the network. Although she doesn't suspect any
employees of misusing computer resources, there is always the potential that one might send
unauthorized emails or other messages containing confidential company information to a
competitor. Which redundant solution should she select that will be most likely to detect
malicious behavior by an internal employee? correct answers Host firewalls and firewalls at each
subnet
Charles is an IT help desk technician. He gets a ticket from a branch office saying that they lost
Internet connectivity. He investigates remotely over a backup maintenance link and determines
that this was done by design; the office's firewall deliberately severed the connection. Which of
the following does this functionality define? correct answers Bastion host
, Malika is a network engineer who is configuring firewalls separating both the Accounting and
HR departments from the rest of the business divisions on the local area network (LAN). She
wants to allow only certain traffic into those subnets from both internal employees and those
working from home. The traffic may include email, chat, and video conferencing. She wants to
prevent access to the company intranets to protect confidential employee and financial data. How
was she configured these firewalls? correct answers Filter
When setting up port forwarding on an external firewall to pass HTTP traffic from the Internet to
an internal web server, the external address and port are 204.40.235.38:8081. What is the internal
IP address and port, assuming the most common port for that protocol? correct answers
192.168.5.74:80
Rupesh is a network technician who has been tasked by his supervisor to configure the edge
firewall of an office branch. His task is to focus on outbound traffic based on several factors,
such as domain name, URL, file extension, and certain keywords. What is he configuring the
firewall to perform? correct answers Content filtering
Augustine is a network engineer for a mid-sized company. He needs to deploy a new firewall,
which was expensive to purchase and is complex to configure. In preparation for installation and
configuration, he attends training conducted by the firewall vendor. Which of the following types
of firewalls is he most likely planning to install? correct answers Commercial
Geraldine is a freelance network technician. She has been hired to design and build a small
office/home office (SOHO) network. She is considering what firewall solution to select, keeping
in mind that her client has a tight budget and the network is made up of no more than six nodes.
Which of the following is the best solution? correct answers Personal hardware firewall
integrated in the wireless access point or modem
Marcus is studying networking with an emphasis on cybersecurity at a local university. As part of
his research, he wants to visit certain hacker sites but is concerned that his laptop would be
vulnerable to passive threats while visiting them. He doesn't have the funds for expensive
security equipment. What is the least expensive option he has at hand? correct answers Native
firewall
