Firewall - Flashcards

What is the primary purpose of a firewall?

Filter network traffic by allowing or blocking it

A firewall is often compared to which of the following?

Security guard

How are firewall rules processed?

Top to bottom, first watch wins

What happens if network traffic does not match any firewall rule?

It is blocked because of the implicit deny rule

Which of the following can a firewall rule match on?

Source IP address

Which of the following is NOT commonly matched by a firewall rule?

Serial number

What is the main characteristics of a stateless firewall

Checks each packet individually without remembering previous traffic

What is the main advantage of a stateful firewall?

Remembers active connections, making it more secure

A user sends a request to a web server. The firewall automatically allows the reply because it remembers the session. What type of firewall is this?

Stateful Firewall

Which firewall type includes application awareness, IPS, and deep packet inspection?

Next-Generation Firewall (NGFW)

What is the primary advantage of a Next-Generation Firewall (NGFW)?

It provides advanced security by inspecting applications and traffic in greater detail.

Which firewall type is generally faster but less secure?

Stateless Firewall

What is the primary purpose of a Proxy Firewall?

Act as a middleman between users and the internet

In a proxy firewall, who communicates directly with the internet?

The proxy firewall

Which firewall protects an entire network?

Network-Based Firewall

Windows Defender Firewall is an example of which type of firewall?

Host-Based Firewall

What is an ACL (Access Control List)?

A list of rules that allow or deny network traffic

A firewall rule allows HTTPS traffic but blocks everything else. What firewall concept is being used?

Implicit Deny

Which firewall rule is applied if no previous rule matches the traffic?

Implicit Deny ✅

Which of the following is something a firewall rule commonly checks?

Destination port

What is the primary purpose of a DMZ (Demilitarized Zone)?

Separate public-facing servers from the internal network

Which devices are commonly placed in a DMZ?

Web servers and email servers

Why is a DMZ important for security?

It limits access to the internal network if a public server is compromised.

Another name for a DMZ is:

Screened Subnet

A company places its public website server in a separate network from internal employee computers. What is this an example of?

DMZ

A firewall checks each packet without knowing whether it belongs to an existing connection. What type of firewall is this?

Stateless Firewall

A firewall remembers that a computer started a connection and allows the response traffic back. What feature is being used?

Stateful Inspection

A firewall administrator creates rules that allow some traffic and block other traffic. These rules are known as:

ACL

A firewall allows HTTPS traffic, allows DNS traffic, and blocks everything else. Why is the remaining traffic blocked?

Implicit deny

A company wants a firewall that can identify applications, inspect traffic deeply, and detect attacks. Which firewall should they use?

Next-Generation Firewall (NGFW)