Network Security Appliances

The security policies in a manufacturing company prohibit the transmission of customer information. However, a security administrator has received an alert that credit card numbers were transmitted as an email attachment. Which of the following MOST accurately describes the source of this alert message?

• IPS

• DLP

• SMTP

• IPsec

A shipping company stores information in small regional warehouses around the country. The company keeps an IPS online at each warehouse to watch for suspicious traffic patterns. Which of the following would BEST describe the security control used at the warehouse?

• Preventive

• Compensating

• Physical

• Detective

A security administrator is reviewing a report that shows a number of devices on internal networks attempting to connect with servers in the data center network. Which of the following security controls should the administrator add to prevent internal systems from accessing data center devices?

• VPN

• IPS

• NAT

• ACL

All firewalls contain this feature

• Packet filtering

• Intrusion prevention

• Stateful inspection

• Deep packet inspection

There was a concern from the senior management that company employees were wasting too much time on entertainment websites instead of focusing on their work. The senior management requested IT to enable web content filtering. What should the IT team consider before enabling DPI? (select all that apply)

• Potential of high hardware utilization, test to see if it will impact network performance

• If the NGFW supports SSL inspection to filter HTTPS requests

• If their ISP supports the routing of packets that have been previously altered by the NGFW

• All of the above

True or false: A NIDS provides passive protection against security threats.

• True

• False

What is commonly found in a UTM firewall?

• Intrusion detection or prevention

• Packet filtering

• Access control

• All of the above

What are cons of using a signature-based malware detection versus heuristic? (select all that apply)

• Many attacks do not conform to specific signatures

• Signatures require more system resources than heuristic learning

• There are more false positives

• Signatures must be updated often

You deployed a web proxy that enables client computers on the LAN to connect to websites and secure websites on the Internet.

What type of proxy is this?

• Reverse

• Non-transparent

• Forward

• Routing

What BEST describes implicy/implicit deny?

• Block everything except what I allow

• Block everything and queue packets for manual inspection

• Allow everything but block traffic if it trips an IPS

• Allow everything except what I block