Network Security and Infrastructure Worksheet Extraction

Jae is a network consultant hired by a small business client. He has been asked to recommend a firewall solution. Given the relatively small size of the infrastructure, he suggests a firewall that provides integrated intrusion detection system/intrusion prevention system (IDS/IPS) functionality because a single device offering multiple functions is cost- and space-effective. What is the solution?

• Packet-filtering router

• Stateful inspection firewall

• Proxy firewall

• Next-generation firewall (NGFW)

Thirty years ago, a major corporation purchased and still owns IP addresses within the IPv4 Class A range. The corporation uses these addresses to connect to the Internet. To which IPv4 address range do they belong?

• 1.0.0.1 to 126.255.255.254

• 10.0.0.0 to 10.255.255.255

• 128.0.0.0 to 191.255.255.255

• 192.0.0.0 to 223.255.255.255

Devaki is an engineer who is designing network security for her company’s infrastructure. She is incorporating protections for programming flaws, default settings, maximum values, processing capabilities, and memory capacities on devices, as well as malicious code and social engineering. What is this type of protection called?

• Perimeter-only security

• Defense in depth

• Single sign-on (SSO)

• Air gapping

Firewalls can provide port-forwarding services.

• True

• False

Integrity is the protection against unauthorized access, while providing authorized users access to resources without obstruction.

• True

• False

Vivienne has been commissioned to design a workgroup network infrastructure for a small office that includes five workstations, three laptops, and a printer. Given that some of the nodes are stationary and others are mobile, what is the best solution for interconnectivity?

• All-wireless network using ad hoc connections

• Wireless access point (WAP) and wired switch

• Direct cabling between devices without a switch

• Single router with no additional switching or wireless

Which operating system (OS) for a bastion host runs on most appliance firewalls as well as many Internet service provider (ISP) connection devices?

• Open-source Linux

• Proprietary OS

• Windows Server

• FreeBSD

Dhruv is the lead network engineer for his three-year-old company. He is writing a proposal that recommends the network protocol to use in several branch offices. Based on the age of the networking equipment, what is his recommendation to the chief information officer (CIO)?

• Continue using IPv4

• Enable dual-stack with IPv4-only routing

• Upgrade to IPv6

• Use legacy IPX/SPX

The IP address range of 192.168.0.0-192.168.255.255/16 is the Class A range.

• True

• False

The network infrastructure supervisor is designing a firewall placement strategy that will protect the organization's Internet-facing web and email servers and the internal network. Which design will provide the best protection?

• Use a single firewall at the network edge

• Use two firewalls to create a DMZ

• Place Internet-facing servers directly on the internal LAN

• Rely only on host-based firewalls for all servers