Firewalls And Network Security Chapters 8-11

Front 1

A bastion host typically provides _____ service.

Back 1

one

Front 2

You should have five bastion hosts if you have a firewall program, a ___ server, an ___ server, a ___ server, and an ____ server on the perimeter.

Back 2

web
FTP
DNS
SMTP

Front 3

You should have at least _____ of storage on a bastion host.

Back 3

500Mb

Front 4

You should create a ____ file on your hard disk so that you can make use of additional memory if needed.

Back 4

page

Front 5

____ is the most popular operating system used to provide services on the World Wide Web.

Back 5

UNIX

Front 6

SSL and TCP wrapper are ____________ security software.

Back 6

supplemental

Front 7

The UNIX utility _________ reports on the services that are currently started.

Back 7

chkconfig

Front 8

When using UNIX you need to do logging through the ______ daemon.

Back 8

syslog

Front 9

The following services should be disabled on a Windows XP bastion host: _______ interface, ______ service, and ___________ service.

Back 9

NETBIOS
server
workstation

Front 10

The following events need to logged; account _____, object ______, policy _______ , and privilege ___.

Back 10

logon
access
changes
use

Front 11

An ___ is a document that can serve as a complete service agreement.

Back 11

SLA (Service License Agreement)

Front 12

____-________ analysis will help you quantify what you will gain by outsourcing.

Back 12

Risk-benefit

Front 13

You should create ___ partitions on a Windows XP operating system.

Back 13

two

Front 14

_________ system files should be on the C: drive of the Windows XP operating system when used as a bastion host.

Back 14

Operating

Front 15

The ____ filesystem should be used for file storage on a Windows 2000 system.

Back 15

NTFS

Front 16

NTFS meets the _-_ U.S government security classification.

Back 16

C-2

Front 17

You find the latest version of the _____ operating system at www.redhat.com.

Back 17

Linux

Front 18

You can find the latest version of the _______ operating system at 222.sun.com.

Back 18

Solaris

Front 19

You find the latest version of the ___ operating system at www.ibm.com.

Back 19

AIX

Front 20

The name given to a server that is placed in the DMZ and whose sole purpose is to direct hackers away from bastion host servers is ________ server.

Back 20

honeypot

Front 21

On a UNIX host you should run a trusted computing base check which makes sure that any software you run is a _______ program.

Back 21

trusted

Front 22

On UNIX, enable the _____ logging if you plan to run the _____ daemon on the server.

Back 22

inetd (Internet Daemon)

Front 23

A _______ _______ server is a secure system with an extra-large storage capacity from which to search all log files for a malicious activity.

Back 23

central logging

Front 24

The two utilities "________ ________ analyzer" and "___ ________ tool" should be used if you are configuring a bastion host using Windows XP.

Back 24

baseline security
IIS lockdown

Front 25

The most important service you should disable on a bastion host is IP __________.

Back 25

forwarding

Front 26

You need to enable port __ and port ___ on a bastion host that will function as a Web server.

Back 26

80
443

Front 27

_______ is a hacker-style tool that you should use to test your bastion host configuration.

Back 27

NetScan

Front 28

________ is the final step to perform after putting the bastion host online.

Back 28

Auditing

Front 29

The following UNIX services should be disabled: all accounts except _____________, the _ ______ system, the ___-___ fileset, and the ________ daemon.

Back 29

administrator
X window
PPP-run
swagentd

Front 30

_______ leased lines have traditionally connected remote users or branch offices to a central administrative site.

Back 30

Private

Front 31

__________, _____________ , and _____________ are used by VPNs.

Back 31

Encryption
encapsulation
authentication

Front 32

The initials VPN stand for _______ _______ _______.

Back 32

Virtual Private Network

Front 33

An IPSec ____________ uses a complex set of security protocols to protect information.

Back 33

concentrator

Front 34

Information that passes to and from TCP/IP-based networks travel in manageable chunks called _______.

Back 34

packets

Front 35

A ______ is a secure channel used by a VPN that runs through the Internet.

Back 35

tunnel

Front 36

Another name for a VPN endpoint is a __________.

Back 36

terminator

Front 37

A Network Access Point is located on a high-speed part of the Internet called the ________.

Back 37

backbone

Front 38

The following devices are end points for a VPN: a VPN _________, a ________/VPN combination, and a ______-based VPN.

Back 38

appliance
firewall
router

Front 39

Encapsulation hides the ______ and ___________ information of the actual data packets.

Back 39

source
destination

Front 40

Header information is not encrypted in packets passing through a VPN when using the _________ method.

Back 40

transport

Front 41

A key is a value that is generated by a formula called an _________.

Back 41

algorithm

Front 42

______________ is essential because hosts in the network that receive VPN communications need to know that the host originating the communications is an approved user of the VPN.

Back 42

Authentication

Front 43

When using __________ keys, the private key is used to generate the public key.

Back 43

asymmetric

Front 44

One advantage of a VPN is control which allows you to decide exactly at what _____ data passing through the VPN will be encrypted.

Back 44

level

Front 45

VPN traffic can be encrypted at the ________ and ___________ level.

Back 45

physical
application

Front 46

The following devices can be used with ___________ authentication: smart card, retinal scan, fingerprint, and a token.

Back 46

multifactor

Front 47

______-__-____ VPN makes a network accessible to remote users who need dial-in access.

Back 47

Client-to-site

Front 48

A VPN _________ is the name of the hardware device specifically designed to terminate VPNs.

Back 48

Appliance

Front 49

____ different VPN products make up the SonicWALL series of VPN hardware devices.

Back 49

Nine

Front 50

The high end SonicWALL hardware devices can support ____ _______ concurrent connections.

Back 50

five hundred

Front 51

The following are features of the ________ Firewall/VPN appliance: web management interface, automatic backup with dial-up access, built-in autosense switch, and support for 40 simultaneous connections.

Back 51

Symantec

Front 52

Novell's BorderManager VPN services can support ___ sites per tunnel.

Back 52

256

Front 53

Novell's directory service used by BorderManager called __________.

Back 53

eDirectory

Front 54

The maximum number of simultaneous users that can be supported by the Cisco 3000 Series VPN Concentrators is __,___.

Back 54

10,000

Front 55

In network __________ mode, the Cisco 3000 Series act like a hardware device enabling a secure site-to-site VPN connection.

Back 55

extension

Front 56

The ____ VPN configuration makes use of security associations.

Back 56

mesh

Front 57

___-___-_____ VPN configuration requires all computers participating int he VPN to connect to a central server.

Back 57

Hub-and-spoke

Front 58

The ____ developed the IPSec Standard.

Back 58

IETF(Internet Engineering Task Force)

Front 59

The L2TP protocol is an extension of ___.

Back 59

PPP (Point-to-Point Protocol)

Front 60

Desktop firewalls designed to run on ___ computer.

Back 60

one

Front 61

The following types of traffic can be blocked by desktop firewalls: __ address, ____ address, and ___________.

Back 61

Ip
port
application

Front 62

An unauthorized access point is called a _____ access point.

Back 62

rogue

Front 63

___________ management has helped to reduce the criticism of desktop firewalls.

Back 63

Centralized

Front 64

The ____ test and certifies firewalls.

Back 64

ICSA (International Computer Security Association)

Front 65

The Tiny Personal Firewall is made up of several different components called "_______".

Back 65

engines

Front 66

Tiny Personal Firewall can be set to filter a packet based on its contents. The following options are available: ______, ____, and ___.

Back 66

permit
deny
ask

Front 67

An administrator needs to create _______ address groups in Tiny Personal Firewall if they want to create filtering rules that apply to groups.

Back 67

trusted

Front 68

Trusted address groups in Tiny Personal Firewall can be based on a single __ address, a ______, or a _____ of network IP addresses.

Back 68

IP
subnet
range

Front 69

A ______ horse is a malicious program that pretends to be a regular and known program.

Back 69

Trojan

Front 70

An MD5 signature is based on the contents of ___________ data.

Back 70

application

Front 71

The purpose of Tiny Personal Firewall's Intrusion Detection System is to monitor the firewall ______.

Back 71

engine

Front 72

Javascript is considered to be ______ active content.

Back 72

engine

Front 73

________ technology protects computers and networks against attacks generated through programs that run in web browsers.

Back 73

Sandbox

Front 74

The sandbox object that prevents active content from reformatting a hard drive is referred to as _______.

Back 74

devices

Front 75

The sandbox objects ___ and ________ prevent unauthorized access to other programs and data.

Back 75

OLE
Spawning

Front 76

The sandbox object ________ prevents Trojan horse applications from being installed.

Back 76

services

Front 77

Sygate Secure Enterprise is made up of __________ server and ________ server.

Back 77

management
security

Front 78

_______ traffic, ________ traffic, and _______ ____ libraries are checked by Sygate Security Server firewall.

Back 78

Inbound
outbound
dynamic link

Front 79

The most flexible firewall configuration restricts packets based on either ___ port or ____________.

Back 79

TCP
applications

Front 80

Creating and checking the signatures of an application program is a process called ______________.

Back 80

fingerprinting

Front 81

Personal Firewall Pro can separately _______ and ___________ each dll that is loaded by an application.

Back 81

inspect
fingerprint

Front 82

The following features are available on the free version of Sygate personal firewall: ___________ blocking, IP ________ protection, and TCP ____ blocking.

Back 82

application
spoofing
port

Front 83

Windows 95 is not supported by the __________ firewall.

Back 83

ZoneAlarm

Front 84

The ZoneAlarm Internet Lock blocks all Internet traffic when the computer is __________.

Back 84

unattended

Front 85

The ZoneAlarm feature ____________ includes information about potential break-ins.

Back 85

AlertAdvisor

Front 86

Another name for a Web address is a _______ ________ _______.

Back 86

Uniform Resource Locator (URL)

Front 87

IP ____________ occurs when a single data transmission is sent to multiple recipients simultaneously.

Back 87

Multicasting

Front 88

Web publishing rules are used to configure the ___ Server to forward requests from external users to internal network Web servers.

Back 88

ISA (Internet Security and Acceleration Server)

Front 89

The bandwidth ISA Server rules are based on _______ __ _______
.

Back 89

Quality of Service (QoS)

Front 90

The following commands can dynamically reallocate memory in Linux: ________ and ________.

Back 90

malloc()
realloc()

Front 91

A network administrator should be concerned when CPU utilization climbs above __ percent.

Back 91

60

Front 92

The following types of hardware should be listed as being part of your protected network: ____________, _______, ________, and ___ appliances.

Back 92

workstations
routers
gateways
VPN

Front 93

The American Red Cross published a guide called "_________ ____ ________ ___ ___ ___________"

Back 93

Preparing Your Business for the Unthinkable

Front 94

____ password and ____ password are other names for a Boot-up password.

Back 94

BIOS
CMOS

Front 95

The maximum number of firewalls that rules can be established for when using the Global Enterprise Management System for the McAfee Gauntlet firewall is ___.

Back 95

500

Front 96

A ________ ___________ __________ (SIM) device is a GUI program that can be used to remotely manage a firewall.

Back 96

Security Information Management

Front 97

The following events should be monitored in a log file check-list: _____ messages, ______ connections, and _______ packets.

Back 97

error
denied
dropped

Front 98

The "_____ only this __________" option immediately terminates the selected connection and blocks all future attempts to establish a connection from the same source IP address to the same destination IP address and port.

Back 98

block
connection

Front 99

The "_____ _______ of this ______" option terminates the active connection and all future attempts to make connections by this source IP address will be denied, no matter what the destination IP address and port.

Back 99

block
access
source

Front 100

The _____ ______ to this ___________ option terminates the selected connection, and all future attempts to establish a connection to the destination IP address will be denied no matter what the source IP address is.

Back 100

block
access
destination

Front 101

______ was developed by the well-known hacker group L0pht.

Back 101

NetCat

Front 102

In the field of computer forensics, ______________ occurs when you determine that the data is the same as the originally seized data.

Back 102

authentication

Front 103

A company would hire an outside firm to check and administer the company _________ to free up the network administrator's time.

Back 103

firewalls

Front 104

A network-based IDS system is the best to use if your network has been subject to ____ scanning.

Back 104

port

Front 105

A network-based IDS system is best to use if you want to ensure a _______ amount of impact on network performance.

Back 105

minimum

Front 106

A ____-based IDS system does not monitor actual network packets.

Back 106

host

Front 107

A _________-based IDS system will not only tell you when intrusion attempts occur, but can also help you prevent future attacks.

Back 107

signature

Front 108

A _________ IDS system is good at identifying new types of attacks.

Back 108

heuristic

Front 109

An _____ IDS notification can display a pop-up message.

Back 109

alert

Front 110

________ is a network auditing tool that will report on any new programs or files that have been added to the system at a particular point in time.

Back 110

Tripwire

Front 111

A high-availability firewall should operate __ hours a day.

Back 111

24

Front 112

The advanced firewall function "____ _______" stores Web site content on a local drive.

Back 112

data caching

Front 113

____ balancing is an advanced firewall function that occurs when a hot standby system is configured to take over all traffic if the primary firewall fails.

Back 113

Load

Front 114

The advantage of a hot standby system is the ____ and _______ with which it can be set up and the quick back-up system it provides for the network.

Back 114

ease
economy

Front 115

The "__ _______" configuration should be used if your server configuration changes frequently and you want to filter requests using the most up-to-date criteria.

Back 115

no caching

Front 116

Load _________ and load ________ are advanced firewall functions that will help to maximize the firewall's uptime and smooth operation.

Back 116

balancing
sharing

Front 117

____ is a routing protocol that can route traffic based on its IP type.

Back 117

OSPF (Open Shortest Path First)

Front 118

30. "B" in the figure above is a ___.

Back 118

DMZ

Front 119

"C" in the figure above is a ______.

Back 119

router

Front 120

"D" in the figure above is a ____ ________.

Back 120

load balancer

Front 121

“E” in the figure above is a LAN _______.

Back 121

gateway

Front 122

The type of VPN configuration displayed in the figure above is ____.

Back 122

mesh

Front 123

The type of VPN configuration displayed in the figure above is ___-___-_____.

Back 123

hub-and-spoke

Front 124

In the figure above, the Intranet is located at _.

Back 124

B

Front 125

In the figure above an __________ firewall configuration is depicted.

Back 125

enterprise

Front 126

________ ________ Pro generated the screen above.

Back 126

Personal Firewall

Front 127

____ Alarm generated the screen above.

Back 127

Zone

Front 128

____ sharing is depicted in the figure above.

Back 128

Load

Front 129

____ sharing is depicted in the figure above.

Back 129

Load

Front 130

A ___ standby setup is depicted in the figure above.

Back 130

hot

Front 131

_____ _____ ______ Manager is displayed in the figure above.

Back 131

Check Point Status

Front 132

The _____ _____ secure update screen is displayed in the figure above.

Back 132

Check Point