Question 1

Which type of translation should you use if you need 50 computers in the corporate network to be able to access the Internet using a single public IP address?

Accepted Answer

A)   one-to-one NAT
B)   port address translation
C)   one-to-many NAT
D)   DMZ proxy translationE) A) and D)
F) B) and D)

Question 2

In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.

Accepted Answer

The answer of In a screened ____________ setup,a router is...

Question 3

Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?

Accepted Answer

Originally,the term dual-homed host was ...

Question 4

MATCHING
-software that prioritizes and schedules requests and then distributes them to servers in a server cluster based on each server's current load and processing power

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) B) and F)
L) A) and C)

Question 5

Which of the following is best described as software that prioritizes and schedules requests and then distributes them to servers based on each server's current load and processing power.

Accepted Answer

A)   server pooling software
B)   traffic distribution filter
C)   priority server farm
D)   load-balancing softwareE) B) and D)
F) A) and B)

Question 6

A _______________ router determines whether to allow or deny packets based on their source and destination IP addresses.

Accepted Answer

The answer of A _______________ router determines whether to allow...

Question 7

MATCHING
-the process of mapping one internal IP address to one external IP address

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) C) and F)
L) E) and G)

Question 8

Which of the following best describes a DMZ?

Accepted Answer

A)   a network of computers configured with robust firewall software
B)   a subnet of publicly accessible servers placed outside the internal network
C)   a private subnet that is inaccessible to both the Internet and the company network
D)   a proxy server farm used to protect the identity of internal serversE) B) and D)
F) A) and D)

Question 9

What is a honeypot and how is one used to help protect the network?

Accepted Answer

A honeypot is a computer placed on the n...

Question 10

MATCHING
-a host in which one interface is connected to an internal network and the other interface is connected to a router to an untrusted network

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) C) and F)
L) A) and F)

Question 11

How does a screened host setup differ from a dual-homed host configuration? Why might you choose this configuration?

Accepted Answer

A screened host setup is similar to a du...

Question 12

MATCHING
-a router placed between an untrusted network and an internal network

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) G) and J)
L) D) and J)

Question 13

What are the 8 general steps for creating a bastion host?

Accepted Answer

1.Select a machine with adequate memory ...

Question 14

Proxy servers take action based only on IP header information.

Accepted Answer

A) True 
 B)False

Question 15

A primary goal of proxy servers is to provide security at the _______________ layer.

Accepted Answer

The answer of A primary goal of proxy servers is...

Question 16

Which of the following is a disadvantage of using a proxy server?

Accepted Answer

A)   shields internal host IP addresses
B)   slows Web page access
C)   may require client configuration
D)   can't filter based on packet contentE) B) and C)
F) None of the above

Question 17

MATCHING
-software that forwards packets to and from the network being protected and caches Web pages to speed up network performance

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) B) and C)
L) B) and F)

Question 18

You can ______________ a bastion host by removing unnecessary accounts and services.

Accepted Answer

The answer of You can ______________ a bastion host by...

Question 19

MATCHING
-a device that filters outgoing connections

Accepted Answer

A)  dual-homed host
B)  load-balancing software
C)  many-to-one NAT
D)  one-to-one NAT
E)  proxy serverF) reverse firewallG) screened hostH) screening routerI) server farmJ) three-pronged firewallK) E) and I)
L) A) and E)

Question 20

How does a server farm and load-balancing software figure into the multiple DMZ/firewall configuration?

Accepted Answer

One DMZ does not provide enough security...

Exam 10: Firewall Design and Management

A _______________ router determines whether to allow or deny packets based on their source and destination IP addresses.

Correct AnswerverifiedShow Answer

Proxy servers take action based only on IP header information.

Correct AnswerverifiedShow Answer

What are the 8 general steps for creating a bastion host?

Correct Answerverified1.Select a machine with adequate memory ...View AnswerShow Answer

MATCHING -a device that filters outgoing connections

Correct AnswerverifiedShow Answer

MATCHING -software that prioritizes and schedules requests and then distributes them to servers in a server cluster based on each server's current load and processing power

Correct AnswerverifiedShow Answer

MATCHING -software that forwards packets to and from the network being protected and caches Web pages to speed up network performance

Correct AnswerverifiedShow Answer

MATCHING -a host in which one interface is connected to an internal network and the other interface is connected to a router to an untrusted network

Correct AnswerverifiedShow Answer

What is a honeypot and how is one used to help protect the network?

Correct AnswerverifiedA honeypot is a computer placed on the n...View AnswerShow Answer

You can ______________ a bastion host by removing unnecessary accounts and services.

Correct AnswerverifiedShow Answer

Which of the following best describes a DMZ?

Correct AnswerverifiedShow Answer

Which of the following is a disadvantage of using a proxy server?

Correct AnswerverifiedShow Answer

MATCHING -a router placed between an untrusted network and an internal network

Correct AnswerverifiedShow Answer

MATCHING -the process of mapping one internal IP address to one external IP address

Correct AnswerverifiedShow Answer

How does a server farm and load-balancing software figure into the multiple DMZ/firewall configuration?

Correct AnswerverifiedOne DMZ does not provide enough security...View AnswerShow Answer

Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?

Correct AnswerverifiedOriginally,the term dual-homed host was ...View AnswerShow Answer

In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.

Correct AnswerverifiedShow Answer

Which type of translation should you use if you need 50 computers in the corporate network to be able to access the Internet using a single public IP address?

Correct AnswerverifiedShow Answer

Which of the following is best described as software that prioritizes and schedules requests and then distributes them to servers based on each server's current load and processing power.

Correct AnswerverifiedShow Answer

How does a screened host setup differ from a dual-homed host configuration? Why might you choose this configuration?

Correct AnswerverifiedA screened host setup is similar to a du...View AnswerShow Answer

A primary goal of proxy servers is to provide security at the _______________ layer.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
1.Select a machine with adequate memory ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A honeypot is a computer placed on the n...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
One DMZ does not provide enough security...
View Answer

Correct Answer
verified
Originally,the term dual-homed host was ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A screened host setup is similar to a du...
View Answer

Correct Answer
verified