CNIT 342 Packet Filtering Exam Questions With Verified Answers

A packet filter is a software solution limiting network connectivity based on packet characteristics - Answer True A Packet filter operates on all levels of the OSI model - Answer False (Only layers 2 and 3) All modern operating systems have some kind of packet filter - Answer True A firewall is a purely hardware solution - Answer False (Hardware and software) Software firewalls are much more effective than hardware firewalls. - Answer False (No such thing as a software firewall) The context of a packet is considered during static filtering - Answer False Static filtering performs scanning the fastest - Answer True Dynamic Packet Filtering is also known as - Answer Stateful Packet Inspection Dynamic packet filtering considers the content of a packet before filtering. - Answer True "In" an external interface is from what side of the firewall? - Answer External network "Out" an external interface is to what side of the firewall? - Answer Internal network "In" an internal interface is from what side of the firewall? - Answer Internal network "Out" an internal interface is from what side of the firewall? - Answer Anywhere Filtering rules consist of what 3 parts? - Answer Source match, Destination match, Action Rules to execute are determined by a longest match algorithm - Answer False (first match algorithm) Filtering rules allow filtering by protocol matching - Answer True