Quiz: Module 09 Infrastructure Security Study Set Questions With Correct Solutions.

Which of the following is NOT true about VPNs? - Answer A full tunnel routes only some traffic over the secure VPN. Which firewall rule action implicitly denies all other traffic unless explicitly allowed? - Answer Allow Which of the following is NOT true about zero trust? - Answer Zero trust is designed to make a system trusted. Maya is researching information on firewalls. She needs a firewall that allows for more generic statements instead of creating specific rules. What type of firewall should Maya consider purchasing that supports her need? - Answer policy-based firewall Astri is reviewing a log file of a new firewall. She notes that the log indicates packets are being dropped for incoming packets for which the internal endpoint did not initially create the request. What kind of firewall is this? - Answer stateful packet filtering What is a virtual firewall? - Answer firewall that runs in the cloud Which of these appliances provides the broadest protection by combining several security functions? - Answer UTM Which firewall allows for the most advanced traffic filtering? - Answer Layer 7 firewall Ada is researching DDoS mitigations for her company. Which of the following should Ada consider? - Answer DNS Sinkhole Which of the following devices routes requests coming from an external network to the correct internal server? - Answer reverse proxy server Iben is preparing a presentation about DMZs. Which of the following would NOT be a true statement regarding a DMZ? - Answer It contains servers that are used only by trusted internal users.