Quiz 14A: Compare and Contrast Security Appliances

Which network security measure involves dividing the network into separate broadcast domains?

• Network Address Translation (NAT)

• Virtual LANs (VLANs)

• Packet Filtering Firewalls

• Network Access Control (NAC)

What is the primary function of security appliances such as firewalls and intrusion detection/prevention systems?

• To manage network access control

• To enforce access controls and filter network traffic

• To facilitate single sign-on (SSO)

• To provide privilege management and authorization

Which network security component is responsible for controlling traffic between different security zones?

• Virtual LANs (VLANs)

• Network Access Control (NAC)

• Proxy Servers

• Firewalls

What is the primary purpose of a perimeter network?

• To allow direct traffic flow between internal hosts

• To provide a secure boundary between the Internet and the private network

• To host servers with public access services

• To establish secure connections for remote access users

What type of host is typically placed in a perimeter network?

• Bastion host

• Proxy server

• Domain controller

• Database server

What is the primary role of the edge firewall in a screened subnet configuration?

• To restrict traffic on the internal LAN

• To filter communications between hosts in the perimeter and LAN

• To allow permitted traffic to hosts in the perimeter zone

• To filter traffic on the external/public interface

What is another term for a triple-homed firewall?

• Choke firewall

• Perimeter firewall

• Bastion firewall

• Screened subnet firewall

Which type of firewall works at Layer 3 of the OSI model?

• Stateful Inspection Firewall

• Packet Filtering Firewall

• Circuit-level Stateful Inspection Firewall

• Application-layer Firewall

What feature distinguishes a stateful inspection firewall from a packet filtering firewall?

• It can inspect and operate on any layer 4 header information.

• It maintains stateful information about established connections.

• It can analyze the content of application-layer protocols.

• It only filters traffic based on source and destination IP addresses.

Which type of firewall operates at Layer 5 (Session) of the OSI model?

• Application-layer Firewall

• Stateful Inspection Firewall

• Circuit-level Stateful Inspection Firewall

• Packet Filtering Firewall