MTA Security Fundamentals Lesson 4

Which of the following should be considered when deciding whether to use a software or hardware firewall?

• Host operating system

• application conflicts

• operating system version

• firewall service efficiency

• stability

Which of the following are layers of the OSI model?

• Physical

• Control

• Application

• Network

Routing occurs at which layer of the OSI model?

• Physical

• Data-Link

• Transport

• Session

• Network

Which of the following are valid firewall types?

• Virtual

• Network

• Packet filtering

• IPsec

• Application

Which of the following are typically examined by a stateful inspection firewall?

• IP address of the sending host

• IP address of the receiving host

• IP address of the router

• Data packet type

• Data packet size

Which of the following is an attack that relies on having a user execute a malicious script embedded in a web page?

• man-in-the-middle

• brute force

• cross-site scripting

• SQL injection

A small business owner has purchased a new wireless access point and wants to ensure that only his systems are able to connect to the wireless. He enables MAC address filtering and puts the MAC addresses for all his computers in the permitted table.

This filtering occurs at which layer of the OSI model?

• Physical layer

• Data-link layer

• Network layer

• Transport layer

• Session layer

A sales team for a medium-sized manufacturing company has just deployed a new e-commerce application to allow for the direct sale of products to its customers. To secure that solution, an application firewall is deployed. At which layer of the OSI model does the application firewall occur?

• Physical layer

• Data-link layer

• Network layer

• Presentation layer

• Application layer

Which of the following are password-based attacks?

• Replay

• Network sniffer

• Brute force

• Man in the middle

• Dictionary

Which of the following is an attack that relies on the attacker being able to trick the sending host into thinking his system is the receiving host, and the receiving host into thinking his system is the sending host?

• Replay

• Brute Force

• Man-in-the-Middle

• Cross-site scripting

• SQL injection