Flashcards
Chapter 7 Review Questions
Flashcards do conjunto (20)
- 1Which secure feature does a load balancer NOT provide?filter packets based on protocol settings
- 2Which of these would NOT be a filtering mechanism found in a firewall rule?date
- 3A(n) _____________ can identity the application that send packets and then make decisions about filtering based on it.Application-Aware Firewall
- 4Which function does an Internet content filter NOT perform?intrusion detection
- 5How does network address translation (NAT) improve security?it discards unsolicited packets
- 6How does a virtual LAN (VLAN) allow devices to be grouped?logically
- 7Which device is easiest for an attacker to take advantage of in order to capture and analyze packets?hub
- 8Which of these is NOT an attack against a switch?ARP address impersonation
- 9Which statement regarding a demilitarized zone (DMZ) is NOT true?It contains servers that are used only by internal network users
- 10Which statement about network address translation (NAT) is true?It removes private addresses when the packet leaves the network
- 11Which of these is NOT an advantage of a load balancer?the risk of overloading a desktop client is reduced
- 12A(n) _________ intercepts internal user requests and then processes those requests on behalf of the users.proxy server
- 13A reverse proxy __________.routes incoming requests to the correct server
- 14Which is the preferred location for installation of a spam filter?with the SMTP server
- 15A _______ watches for attacks and sounds an alert only when one occurs.Network Intrusion Detection System (NIDS)
- 16A multipurpose security device is known as __________.Unified Threat Management (UTM)
- 17Each of these can be used to hide information about the internal network EXCEPT ________.a protocol analyzer
- 18What is the difference between a network intrusion detection system (NIDS) and a network intrusion prevention system (NIPS)?A NIPS can take actions more quickly to combat an attack
- 19If a device is determined to have an out-of-date virus signature file, then Network Access Control (NAC) can redirect that device to a network by __________.Address Resolution Protocol (ARP) poisoning
- 20A firewall using __________ is the most secure type of firewall.stateful packet filtering
Informações
- Descrição
- Fundamentals of Information Security Chapter 7 Review Question answers
- Criado por
- Odin D.
- Visualizações
- 41
- Tags
- Avaliação