FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 9: Firewalls and Intrusion Prevention Systems

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 21

Multiple Choice

Review LaterAdd Note

Review Later

_________ control controls how particular services are used.

A) Service
B) Behavior
C) User
D) Direction

Correct Answer

verified

Show Answer

Question 22

True/False

Review LaterAdd Note

Review Later

A traditional packet filter makes filtering decisions on an individual packet basis and does not take into consideration any higher layer context.

Correct Answer

verified

Show Answer

Question 23

Multiple Choice

Review LaterAdd Note

_________ control determines the types of Internet services that can be accessed,inbound or outbound.

A _________ firewall applies a set of rules to each incoming and outgoing IP packet and then forwards or discards the packet.

__________ are attacks that attempt to give ordinary users root access.

Snort Inline enables Snort to function as an intrusion prevention capability.

A firewall can serve as the platform for IPSec.

One disadvantage of a packet filtering firewall is its simplicity.

_________ matching scans incoming packets for specific byte sequences (the signature)stored in a database of known attacks.

The _________ is inserted between the premises network and the Internet to establish a controlled link and to erect an outer security wall or perimeter to protect the premises network from Internet-based attacks.

A ___________ makes use of both signature and anomaly detection techniques to identify attacks.

A single device that integrates a variety of approaches to dealing with network-based attacks is referred to as a __________ system.

The primary role of the personal firewall is to deny unauthorized remote access to the computer.

__________ anomaly watches for unusual traffic activities,such as a flood of UDP packets or a new service appearing on the network.

Typically the systems in the _________ require or foster external connectivity such as a corporate Web site,an e-mail server,or a DNS server.

Unlike a firewall,an IPS does not block traffic.

Distributed firewalls protect against internal attacks and provide protection tailored to specific machines and applications.

The _________ attack is designed to circumvent filtering rules that depend on TCP header information.

A packet filtering firewall is typically configured to filter packets going in both directions.

A logical means of implementing an IPSec is in a firewall.