Firewalls And Network Security Chapters 1 - 3

Front 1

___ is the multi-pronged approach to network security.

Back 1

DiD

Front 2

A _____ consists of hardware or software that monitors the transmission of packets of digital information that attempt to pass through the perimeter of a network.

Back 2

firewall

Front 3

Two basic security functions that firewalls perform are _____ filtering and _____ proxy gateways.

Back 3

packet / application

Front 4

_____ firewall security features include logging access, authenticating users, caching data, and filtering content.

Back 4

Advanced

Front 5

Trojan horses enter the system through hidden openings called _____ _____.

Back 5

back doors

Front 6

The point at which one network connects to another network is called the network _____.

Back 6

boundary

Front 7

BlackICE Defender, Zone Alarm, and Tiny Personal Firewall are personal _____ programs.

Back 7

firewall

Front 8

A _____ host is a machine that has no unnecessary services running on it.

Back 8

bastion

Front 9

The SMTP protocol uses port __.

Back 9

25

Front 10

The POP3 protocol uses port ___.

Back 10

110

Front 11

The _____ -___ command will refresh the netstat display every 5 seconds.

Back 11

netstat -an5

Front 12

A _____ server will make high-level application connections on behalf of internal hosts.

Back 12

proxy

Front 13

_____ _____ number theft is the most harmful result to individuals of a hacker attack.

Back 13

Credit card

Front 14

The _____ process uses encryption to protect usernames and passwords.

Back 14

authentication

Front 15

Packet filtering occurs at the _____ layer of the OSI model.

Back 15

transport

Front 16

Encryption occurs at the _____ layer of the OSI model.

Back 16

presentation

Front 17

The SOCKS proxy server functions at the _____ layer of the OSI model.

Back 17

session

Front 18

NAT functions at the _____ layer of the OSI model.

Back 18

network

Front 19

_____ is another name for a packet.

Back 19

Datagram

Front 20

_____ packet filtering examines the data contained in a packet, and a memory of the state of the connection between the client and the server.

Back 20

Stateful

Front 21

The first thing that a _____ firewall does when a request packet arrives is to check a list of active connections.

Back 21

stateful

Front 22

The list of _____ _____ includes: TCP filtering, IP filtering, and ICMP.

Back 22

filter rules

Front 23

___ servers function as a network-level proxy.

Back 23

NAT

Front 24

An application layer gateway is also known as a _____ server.

Back 24

proxy

Front 25

The _____ address range is 169.254.0.0/16.

Back 25

APIPA

Front 26

The process of mapping a static public IP address to a private IP address of a computer on the local network is called __ _____ mapping.

Back 26

IP address

Front 27

Filtering, proxying, and logging are the core functions of all _____.

Back 27

firewalls

Front 28

The term _____ is used by vendors to describe expensive firewall products.

Back 28

appliance

Front 29

Email and web servers should be placed in the ___.

Back 29

DMZ

Front 30

A secure network located at the perimeter of another network

Back 30

Service network

Front 31

An attempt to put a false IP address into a packet header

Back 31

IP spoofing

Front 32

A device that connects and directs traffic between networks

Back 32

Router

Front 33

A review of system's operation to evaluate its performance

Back 33

Audit

Front 34

Acts as an innocent program until it is activated

Back 34

Trojan horse

Front 35

Describes a multilayered approach to network security

Back 35

Defense in Depth

Front 36

The point at which one network stops and another network begins

Back 36

Network boundary

Front 37

Programs that replicate themselves over a computer network

Back 37

Worms

Front 38

The part of a packet that contains information such as source IP address

Back 38

Header

Front 39

A network between two hosts over a public network

Back 39

VPN

Front 40

There are _____ steps to follow when building a security policy.

Back 40

seven

Front 41

Loss of _____ can take place when sensitive customer and financial information is compromised during a hack attack.

Back 41

data

Front 42

Loss of _____ occurs when sales people can't take orders and technicians cannot manage the system due to a hack attack.

Back 42

productivity

Front 43

A loss of _____ time occurs when employee resources have to be directed toward patching the security holes and preventing future attacks.

Back 43

staff

Front 44

SANS defines a _____ as "a document that outlines specific security or rules that must be met".

Back 44

policy

Front 45

Membership of a _____ team should include senior administrators, a member of the legal staff, a member of the IT department, and an editor or writer.

Back 45

policy

Front 46

The _____ security approach has a primary emphasis of restricting traffic between two networks to only a few authorized activities.

Back 46

restrictive

Front 47

The _____ security approach calls for traffic to flow freely between two networks except for communications using specified ports, services, or computers.

Back 47

permissive

Front 48

An _____ security stance is one where the primary emphasis is on making resources available.

Back 48

open

Front 49

A _____ security policy would specify basic packet filtering at the network perimeter but with a more strict approach.

Back 49

cautious

Front 50

A _____ security policy approach would completely disconnect the internal network from the Internet.

Back 50

paranoid

Front 51

An _____ approach to a security policy should include the installation of a stateless packet filter.

Back 51

optimistic

Front 52

The actual hardware devices that keep data flowing throughout the network are known as _____ assets.

Back 52

physical

Front 53

_____ assets are what most people think of when they think of a firewall.

Back 53

Logical

Front 54

_____ assets refer to the software that runs your system.

Back 54

System

Front 55

The process of recording which computers are accessing a network and what resources are being accessed is called _____.

Back 55

auditing

Front 56

The most common type of auditing is the auditing of _____ files.

Back 56

log

Front 57

Security auditing in Windows 2000 can be activated on individual folders as long as the disk that contains the folder is formatted in ____.

Back 57

NTFS

Front 58

_____ sharing is not a typical security risk.

Back 58

File

Front 59

The part of a security policy that includes E-mail and News is called _____ use.

Back 59

acceptable

Front 60

Of all of the Microsoft products only Windows 2000 and Windows XP allow for the use of _____ to protect communications.

Back 60

IPSec

Front 61

E-mail virus infections, employees giving out passwords, and brute force attacks can breach even the most elaborate _____ setup.

Back 61

firewall

Front 62

_____ access policy is the name for the part of the security policy that spells out how employees dial into the office network to access files.

Back 62

Remote

Front 63

_____ policy is the part of a security policy that determines how you manage private and public keys.

Back 63

Key

Front 64

The development of a security policy typically takes only _-_ weeks.

Back 64

1-2

Front 65

The _____ priority for users/workers on a network is getting access to the information that they need.

Back 65

top

Front 66

If possible, a security policy should be kept to no longer than _ pages.

Back 66

5

Front 67

A device that routes requests for information based on response time

Back 67

Load balancing switch

Front 68

Hardware or software designed to detect unauthorized network access

Back 68

IDS

Front 69

Instructs employees on an overall security policy

Back 69

Security User Awareness program

Front 70

Breaching a firewall-protected network by flooding it with traffic

Back 70

Brute force attack

Front 71

The process of recording computer and resource access

Back 71

Auditing

Front 72

Unix-based protocol that enables secure access to a remote computer

Back 72

Secure shell

Front 73

Two firewalls enclosed by two load balancing switches

Back 73

Firewall sandwich

Front 74

Rules governing acceptable use of computing resources

Back 74

Security policy

Front 75

A set of security standards developed by the IETF

Back 75

IPSec

Front 76

The most important configuration file on your firewall is the _____ file.

Back 76

rules

Front 77

A deny all approach will block _____ by default and only specifically allow those services you need on a case-by-case basis.

Back 77

everything

Front 78

If you follow a _____ approach to security, you should set up a stateful instead of a stateless packet filter.

Back 78

“cautious”

Front 79

If you follow a ______ approach to security, set up application proxy gateways that forward requests on behalf of internal users.

Back 79

“strict”

Front 80

A firewall needs to be _____ so that it can grow with the network it protects.

Back 80

scalable

Front 81

A _____ host needs to have sufficient processor speed and memory to handle the network's present traffic and increased traffic as the network grows.

Back 81

bastion

Front 82

A _____ resource is defined as a software- or hardware-related item that is indispensable to the operation of the device or program.

Back 82

critical

Front 83

Many _____ systems perform IP forwarding, as do routers.

Back 83

operating

Front 84

A _____-_____ host is a client computer that is connected to the Internet and hosts firewall software.

Back 84

dual-homed

Front 85

A _____ firewall monitors outbound rather than inbound traffic.

Back 85

reverse

Front 86

A DMZ screened _____ is a network of publicly accessible servers that is connected to the firewall but is outside the internal network being protected.

Back 86

subnet

Front 87

If you are a victim of a port scanning attack, you should review your firewall _____ and block access from the "bad" IP addresses.

Back 87

logs

Front 88

If you are a victim of a harmful e-mail attachments attack, you should use software that _____ Port 25 for SMTP traffic.

Back 88

scans

Front 89

A _____ router filters traffic to individual computers within the internal network.

Back 89

screening

Front 90

A router determines where packets should go through an interface and which should be blocked based on a set of rules called an _____ _____ _____.

Back 90

access control list

Front 91

A _____-_____ host is a fancy term for a computer that has two network interfaces.

Back 91

dual-homed

Front 92

A _____ host is sometimes called a dual-homed gateway or bastion host.

Back 92

screened

Front 93

A ___ is a network that sits outside the internal network but is connected to the firewall and provides publicly available servers.

Back 93

DMZ

Front 94

You create a _____ subnet by adding servers that permit public services and combining them to the firewall's subnet.

Back 94

screened

Front 95

A subnet that is attached to the firewall and contained in the DMZ is called a _____ network.

Back 95

service

Front 96

The firewall in a DMZ screened subnet is sometimes called a _____-_____ firewall.

Back 96

tri-homed

Front 97

The DNS server in the DMZ needs only list a limited number of _____ IP addresses.

Back 97

public

Front 98

A _____ server is a server that creates a secure tunnel connection.

Back 98

tunnel

Front 99

The arrangement of a DMZ enclosed by two firewalls is sometimes called a _____-_____ firewall.

Back 99

tri-homed

Front 100

One advantage to setting up a DMZ with two _____ is you can control where traffic goes in the three networks.

Back 100

firewalls

Front 101

IPSec and Kerberos are _____ with NAT.

Back 101

incompatible

Front 102

If you want a failover firewall, both models must be _____ so that they can be configured for seamless operation.

Back 102

compatible

Front 103

The _____ ___ _____ Firewall uses state update packets to pass data about the state of the current connections between the primary and the failover firewall.

Back 103

Cisco PIX Failover

Front 104

A _____ firewall is a device that monitors information going out of a network rather than trying to block what is coming in.

Back 104

reverse

Front 105

A ___ router converts publicly accessible IP addresses to private ones and vice versa.

Back 105

NAT

Front 106

A workstation with an internal interface and an external Internet interface

Back 106

Dual-homed host

Front 107

Network exposed to an external network but partially protected by a firewall

Back 107

screened subnet

Front 108

Enables VPN clients to connect to it based on their IP addresses

Back 108

Tunnel server

Front 109

Has three interfaces connecting it to the external network, DMZ, and protected LAN

Back 109

Three-pronged firewall

Front 110

Designed to maintain connections in case a primary firewall stops working

Back 110

Failover firewall

Front 111

Screened subnet connected to a firewall at the edge of a protected network

Back 111

Perimeter network

Front 112

Backup services are provided by maintaining copies of connection states

Back 112

Stateful failover

Front 113

The use of two firewalls to set up three separate networks

Back 113

Tri-homed firewall

Front 114

Inspects and monitors traffic leaving a local network

Back 114

Reverse firewall

Front 115

Filters traffic passing between one network to another

Back 115

Screening router