CASP: Chapter 4 (1of2)

Which device operates at layer 3 of the OSI model and forwards traffic between subnets based on IP addresses?

• Router

• Load Balancer

• Firewall

• Intrusion Detection System (IDS)

Which device provides a foundational level of protection for a network by blocking or allowing traffic based on pre-configured rules, but does not inspect high-level protocols such as HTTP?

• Router

• Intrusion Prevention System (IPS)

• Load Balancer

• Firewall

Which device is commonly associated with managing web traffic and can be implemented as either a physical appliance or a virtual machine, offering specialized software for configuring traffic management rules?

• Load Balancer

• Router

• Intrusion Detection System (IDS)

• Firewall

In a cloud platform like AWS, which component allows private subnets in a Virtual Private Cloud (VPC) to access the Internet while preventing inbound connections from the Internet to instances in the private subnet?

• Security Group

• Network Load Balancer (NLB)

• Network Address Translation (NAT) Gateway

• Virtual Private Network (VPN) Gateway

Which email security mechanism involves inspecting all inbound and outbound traffic, scanning for keywords, and utilizing behavioral and heuristic analyses to identify potential threats?

• Email Encryption

• Email Authentication

• Email Archiving

• Email Filtering

Which method of defending against Distributed Denial-of-Service (DDoS) attacks involves reducing the amount of throughput available to the server or service being attacked, thus protecting the network from consuming all available bandwidth?

• Cloud Service Providers

• Web Application Firewall (WAF)

• Blackhole Routing

• Rate Limiting

Which approach for defending against Distributed Denial-of-Service (DDoS) attacks involves inspecting traffic for signs of malicious activity, such as CSRF, XSS, and SQL injection, using sophisticated rules designed to identify and prevent these attacks from reaching the target?

• Cloud Service Providers

• Blackhole Routing

• Web Application Firewall (WAF)

• DDoS Mitigation Software/Appliance

In a Unified Threat Management (UTM) system, what service is responsible for inspecting traffic to locate and block viruses, and may also function as a management server to deploy and configure virus protection for endpoint devices?

• Web Filtering

• Antivirus

• SPAM Filtering

• Content Filtering

Which Unified Threat Management (UTM) service involves blocking MIME types, file extensions, applets (Java, ActiveX), and implementing Data Loss Prevention (DLP)?

• SPAM Filtering

• Content Filtering

• Web Filtering

• Firewall

What distinguishes a transparent proxy from a non-transparent proxy?

• A transparent proxy intercepts client traffic without the client needing to be reconfigured.

• A transparent proxy accepts client connections on port 8080.

• A transparent proxy is configured with filters for multiple protocol types.

• A transparent proxy requires client configuration with the proxy server address and port number.