Chapter 1 Firewalls

Front 1

Which of the following characteristics relates to access control?

Back 1

The process or mechanism of granting or denying use of resources; typically applied to users or generic network traffic

Front 2

Which term describes an object, computer, program, piece of data, or other logical or physical component you use in a business process to accomplish a business task?

Back 2

Asset

Front 3

When conducting an audit, the auditor should be which of the following?

Back 3

An external person who is independent of the organization under audit

Front 4

Which of the following describes authentication?

Back 4

The process of confirming the identity of a user

Front 5

Which term describes when a system is usable for its intended purpose?

Back 5

Availability

Front 6

Which of the following is the name given to unauthorized access to a system unofficially with no bad intent?

Back 6

Backdoor

Front 7

Which of the following describes a blacklist?

Back 7

A type of filtering in which all activities or entities are permitted except those identified

Front 8

Which term describes a network device that forwards traffic between networks based on the MAC address of the Ethernet frame?

Back 8

Bridge

Front 9

Which of the following describes caching?

Back 9

Retention of Internet content by a proxy server

Front 10

Which of the following characteristics relates to a demilitarized zone (DMZ)?

Back 10

A type of perimeter network used to host resources designated as accessible by the public from the Internet

Front 11

Which of the following refers to a form of attack that attempts to compromise availability?

Back 11

Denial of service (DoS)

Front 12

Which of the following refers to filtering traffic as it attempts to leave a network, which can include monitoring for spoofed addresses, malformed packets, unauthorized ports and protocols, and blocked destinations?

Back 12

Egress filtering

Front 13

A security policy is important for all of the following reasons except which one?

Back 13

With it, you cannot trust the network's security.

Front 14

Which term is used to describe a network security device or host software that filters communications, usually network traffic, based on a set of predefined rules?

Back 14

Firewall

Front 15

Which of the following terms refers to the process of securing or locking down a host against threats and attacks?

Back 15

Hardening

Front 16

Integrity prevents unauthorized changes to data.

Back 16

True

Front 17

The term monitoring refers to the act of creating or recording events into a log.

Back 17

False

Front 18

A chokepoint is a form of bottleneck and is a single, controlled pathway between two different levels of network trust where a firewall or other filtering devices block or allow traffic based on a set of rules.

Back 18

True

Front 19

Intrusion Detection System (IDS) is a security mechanism that detects unauthorized user activities, attacks, and network compromises.

Back 19

True

Front 20

The term zero day exploit describes a new and previously unknown attack for which there is not a current specific defense.

Back 20

True