Firewalls and IPS

What is the primary purpose of a firewall in the context of internet connectivity?

• To enhance network speed

• To create a threat to internal systems

• To establish a controlled link between the premises network and the internet

• To allow all types of traffic without restrictions

What is a firewall's role as a perimeter defense?

• Allowing unrestricted access to external networks

• Creating multiple choke points for enhanced security

• Insulating internal systems from external networks

• Penetrating the firewall to test its immunity

What is a critical consideration in the planning and implementation of a firewall?

• Ensuring the firewall is penetrable

• Specifying a suitable access policy

• Allowing unauthorized traffic

• Ignoring information security risk assessment

What does a firewall access policy include?

• Only application protocols

• Protocols and IP addresses for specific services

• Ignored information from a security risk assessment

• Allowing all types of traffic without restrictions

Which characteristic is used for controlling access based on considerations such as time, rate of requests, or other activity patterns?

• IP address and protocol values

• Application protocol

• User Identity

• Network activity

A firewall access ________ lists the types of traffic authorized to pass through, including address ranges, protocols, applications, and content types. This ____________ should be developed from the organization’s information security risk assessment and information security _______________.

Characteristics that a firewall access policy could use to filter traffic include IP address and protocol values, application protocol, user identity, and _______________. This type of filtering controls access based on considerations such as time, rate of requests, or other activity patterns.

Who uses a distributed firewall configuration?

• Large businesses and government organizations

• Small businesses and startups

• Individual users and home networks

• Non-profit organizations and educational institutions

Who developed the Digital Immune System?

• IBM

• Microsoft

• Apple

• AMD

What does Sdrop mean in Snort?

• Packet accepted

• Packet dropped and logged

• Packet rejected and logged

• Packet dropped but not logged