Firewall and Intrusion Detection Systems Quiz

What is the primary function of a firewall?

• Detect suspicious activity

• Block unauthorized access

• Encrypt network traffic

• Alert administrators

Which type of firewall inspects data packets based on IP addresses and port numbers?

• Stateful firewall

• Application firewall

• Packet filtering firewall

• Deep packet inspection firewall

Stateful firewalls differ from packet filtering firewalls by:

• Blocking all traffic by default

• Inspecting application data

• Tracking active network connections

• Encrypting data packets

Which OSI layer does an application firewall operate on?

• Layer 3 (Network)

• Layer 4 (Transport)

• Layer 5 (Session)

• Layer 7 (Application)

What is a limitation of packet filtering firewalls?

• Cannot track connection states

• Slows down traffic significantly

• Cannot block unauthorized IP addresses

• Requires application-specific rules

Which system alerts administrators about suspicious activity but does not block it?

• Intrusion Prevention System (IPS)

• Stateful Firewall

• Intrusion Detection System (IDS)

• Application Firewall

What type of IDS monitors activities on individual devices?

• Network-based IDS (NIDS)

• Host-based IDS (HIDS)

• Stateful IDS

• Application-based IDS

What is the key difference between IDS and IPS?

• IDS blocks threats, while IPS only detects them.

• IDS alerts administrators, while IPS blocks threats.

Which type of firewall inspects the content of traffic, such as HTTP requests?

• Packet filtering firewall

• Stateful firewall

• Application firewall

• Deep packet inspection firewall

What type of IDS would best monitor traffic entering a network?

• Host-based IDS

• Application IDS

• Network-based IDS

• Stateful IDS