CompTIA Security+ Chapter 8 Study Guide

A firewall can use NAT and packet filters.

• True

• False

NAT filtering accepts or rejects packets based on rules.

• True

• False

A stateless packet filter is vulnerable to IP spoofing attacks.

• True

• False

Circuit-level gateways work at the session layer of the OSI model.

• True

• False

NAT filtering matches incoming traffic to corresponding outbound IP connections by matching the IP address and port.

• True

• False

An IP proxy serves client requests by caching HTTP information.

• True

• False

An IP proxy can be the victim of denial-of-service attacks.

• True

• False

A honeypot is a device that caches information for hackers.

• True

• False

A NIDS can inspect traffic and possibly remove, detain, or redirect malicious traffic.

• True

• False

Honeynets are one or more computers or servers used to counteract attempts at unauthorized access to a network.

• True

• False