A list of filtering rules that firewalls use to identify allowed and blocked traffic.

Network-based firewalls are more expensive and require more configuration than other types of firewalls, but they are much more robust and secure.

Most network-based firewalls are not considered hardware firewalls even though they use a combination of hardware and software to protect the network from internet attacks.

Almost all host-based firewalls are software firewalls.

You can use a host-based firewall in addition to a network-based firewall to provide multiple layers of protection.

Firewalls use filtering rules to identify allowed and blocked traffic. The filtering rules are also referred to as _________

On what OSI layer does a packet filtering firewall operate?

A packet-filtering offers lower performance than other types of firewalls.

On what OSI level does a circuit-level gateway operate?

An application-layer firewall is the slowest form of firewall because entire messages are reassembled at the Application layer.

Which choice below is not a feature of Unified Threat Management (UTM) devices?

The firewall scans incoming and outgoing network traffic. It compares that traffic to the rules you have defined. Then it decides whether the traffic should be allowed or denied. What are the two types of denies?

_________ is a command-line firewall utility for Linux systems.

This command clears firewall rules.

What does the following command do?

sudo iptables -A INPUT -j DROP

An appliance, also known as an all-in-one appliance, that combines several layers of security and networking services into one solution.

What does a flood guard not do?

This is located between a private network and an untrusted network, such as the internet.

Any host that is exposed to attack and that has been hardened (fortified) against those attacks.

A firewall device that typically has three network interfaces: one connected to the internet, one connected to the public subnet, and one connected to the private network.

This uses two firewalls. The external firewall is connected to the internet and allows access to public resources. The internal firewall connects the screened subnet to the private network.

A device or software that monitors, logs, and detects security breaches, but takes no action to stop or prevent the attack.

Signature-based detection in an IDS cannot detect unknown attacks; it can detect only those attacks identified by published signature files. For this reason, it is important to update signature files regularly.

This monitors system data on an individual host, such as a server.