BULB 2 Firewall

Which type of address is the public IP address of a NAT device?

• A. outside global

• B. outside public

• C. outside local

• D. inside local

• E. inside global

Answer explanation

Inside local address – The IP address assigned to a host on the inside network. The address is usually not an IP address assigned by the Internet Network Information Center (InterNIC) or service provider. This address is likely to be an RFC 1918 private address.

Inside global address – answer 'outside global' legitimate IP address assigned by the InterNIC or service provider that represents one or more inside local IP addresses to the outside world.*

Outside local address – The IP address of an outside host as it is known to the hosts on the inside network.*

Outside global address – The IP address assigned to a host on the outside network. The owner of the host assigns this address.

Which statement about the nature of NAT overload is true?

• A. applies a many-to-many relationship to internal IP addresses

• B. applies a one-to-one relationship to internal IP addresses

• C. can be configured only on Gigabit interface

• D. applies a one-to-many relationship to internal IP addresses

Which keyword in a NAT configuration enables the use of one outside IP address for multiple inside hosts?

• A. pool

• B. static

• C. source

• D. overload

• E. dough

Stateless firewalls operate in _____ in the OSI model

• Layer 3

• Layer 2

• Layer 7

• Layer 5

Layer 3 firewall can detect malicious traffic

• False

• True

What is the policy called, when everything is denied unless specifically allowed?

• Implicit deny

• explicit deny

• explicit allow

• implicit allow

When you try to route the Private Addresses (from RFC 1918) to the public internet. Public Internet will deny the traffic and will not route the destination addressed to those three networks. Which of these IP does not follow the RFC 1918 Private Addresses?

• 172.15.0.0

• 10.10.10.1

• 192.168.1.1

• 172.30.255.255

• 172.31.255.255

Answer explanation

Class A:

10.0.0.0 to 10.255.255.255

Class B:

172.16.0.0 to 172.31.255.255

Class C:

192.168.0.0 to 192.168.255.255

When we are on a network that has multiple devices on the inside sharing a single public IP address. We implement a ______ to make sure all the messages originating from the inside that potentially has the same source port number be translated to a different source port number.

• Firewall

• Static NAT

• Dynamic NAT

• Dynamic PAT

• Proxy

2 Source machines in a local network is trying to access 203.0.113.100:80 in the public internet. The NAT router uses a single public IP such as 198.51.100.10 to connect to the internet. What should be the IP for "OUTSIDE GLOBAL" in line with the green PC for NAT to allow back-and-forth communication to the destination 203.0.113.100:80?

Note: Setup is a Dynamic PAT

• 198.51.100.10

• 10.0.0.20

• 0.0.0.0

• 203.0.113.100

• 10.0.0.10

WFBS-SVC and Apex One SaaS firewall is a stateful firewall

• False

• True