Flashcards
System Admin- Secure Internet Connectivity
Cards in this deck (11)
- 1Q1: What is DMZ and acronym for and what does DMZ do?DMZ is a acronym for Demilitarised Zone
A DMZ (also known as a perimeter network) is a way of providing further protection for a network by separating out those services that need to be directly connected to an untrusted network such as the Internet from those that don’t. - 2Q2: what is meant by ingress and egress as applied to a firewall?Each interface on a firewall has an IN (ingress) and OUT (egress) direction. Conventionally, the IN direction is going INTO the firewall, and the OUT direction is going OUT of the firewall.
- 3Q3: What info can you filter on with a static packet filtering firewall?Static packet filters work at the network layer of TCP/IP stack. They inspect basic information such as:
source and destination IP addresses and port numbers. - 4Q4: At what level does a Web Proxy filter?At the application layer of the TCP/IP stack
- 5Q5: Why are you advised to use a circuit-level firewall or an application-level firewall if you are using private IP addresses on your internal network?If you want to use private IP addresses on your LAN and you want to use a proper firewall then the solution is to use either a circuit-level or an application-level firewall – both of these replace source IP addresses with a different, outgoing, IP address (like a NAT router).
- 6Q6: Why would you need public IP addresses on your internal network if you wanted to use a stateful-multilayer inspection firewall?Stateful-multilayer inspection firewalls filter packets at the network layer, decide if they are part of a legitimate session at the transport layer, and worry about packet contents at the application layer. However, unlike circuit- or application-level firewalls, they allow a direct connection between source and destination computer and so they do not perform any network translation – so the IP address of the source has to be usable on the Internet.
- 7Q7: Why might using a stateful-multilayer inspection firewall not always be the best thing to do?They are the most secure type of firewall, but their complexity can make them difficult to administer, which may result in a lower level of security than offered by other simpler firewalls if they are not used properly.
- 8Q8. Which of the following are private IP addresses? a. 10.13.45.9 b. 172.56.213.5 c. 182.168.255.254Only (a) – 10.13.45.9 is a Private IP address.
- 99. What three components make up a socket?IP Address
Transport Protocol
Port Numbers - 1010. What services use the following port numbers? a. UDP 53 b. TCP 53 c. TCP 25 d. TCP 80a. UDP 53-DNS
b. TCP 53-DNS
c. TCP 25- SMTP
d. TCP 80-HTTP - 1111. What traffic would the following filter on a packet filtering firewall allow through? permit UDP host 67.31.45.123 eq 53 any eq5311. It would allow traffic from UDP port 53 on a computer with an IP address of 67.31.45.123 to go to any other IP address provided it was going to UDP port 53 on the destination. In other words, this is traffic between DNS servers.
Information
- Description
- Flashcards on System Admin- Secure Internet Connectivity , created by Robena786 on 23/05/2015.
- Created by
- Robena786 · May 2015
- Updated
- Feb 19, 2016
- Views
- 0
- Rating