Cisco Networking Essentials 39.5

Multiple Choice

Which of the following is NOT a common benefit of firewalls?

• Prevents unauthorized access to internal network resources

• Blocks known malicious IP addresses and ports

• Can inspect encrypted traffic (HTTPS) without SSL inspection

• Provides logging and monitoring of all traffic

Multiple Select

Compare the limitations of packet filtering (stateless) firewalls and stateful firewalls. Which limitations are shared by both types?

• Cannot inspect application-layer content

• Cannot track session state

• Cannot block SYN flood attacks

• Cannot distinguish safe vs malicious HTTP

Multiple Choice

Which firewall type is most suitable for blocking specific applications like TikTok or Tor, and why?

• Packet Filtering Firewall

• Stateful Firewall

• Application Gateway Firewall

• Next-Generation Firewall (NGFW)

Multiple Choice

What is the main advantage of using nftables over iptables in modern Linux distributions?

• nftables has more complex syntax

• nftables offers better performance and cleaner syntax

• iptables supports more protocols

• iptables is the default firewall in newer distributions