ISC-Certified Information Systems Security Professionals Set 14

1.

An application layer firewall is also called a:

Proxy A Presentation Layer Gateway. A Session Layer Gateway. A Transport Layer Gateway.

2.

Application Layer Firewalls operate at the:

OSI protocol Layer seven, the Application Layer. OSI protocol Layer six, the Presentation Layer. OSI protocol Layer five, the Session Layer. OSI protocol Layer four, the Transport Layer.

3.

One drawback of Application Level Firewall is that it reduces network performance due to the fact that it must analyze every packet and:

decide what to do with each application. decide what to do with each user. decide what to do with each port. decide what to do with each packet.

4.

A circuit level proxy is ____________ when compared to an application level proxy.

lower in processing overhead. more difficult to maintain. more secure. slower.

5.

In a stateful inspection firewall, data packets are captured by an inspection engine that is operating at the:

Network or Transport Layer. Application Layer. Inspection Layer. Data Link Layer.

6.

When an outgoing request is made on a port number greater than 1023, this type of firewall creates an ACL to allow the incoming reply on that port to pass:

packet filtering Circuit level proxy Dynamic packet filtering Application level proxy

7.

A DMZ is located:

right behind your first Internet facing firewall right in front of your first Internet facing firewall right behind your first network active firewall right behind your first network passive Internet http firewall

8.

The DMZ does not normally contain:

encryption server web server external DNS server mail relay

9.

Network-based Intrusion Detection systems:

commonly reside on a discrete network segment and monitor the traffic on that network segment. commonly will not reside on a discrete network segment and monitor the traffic on that network segment. commonly reside on a discrete network segment and does not monitor the traffic on that network segment. commonly reside on a host and monitor the traffic on that specific host.

10.

Which of the following are additional terms used to describe knowledge-based IDS and behavior-based IDS?

Signature-based IDS and statistical anomaly-based IDS, respectively. Signature-based IDS and dynamic anomaly-based IDS, respectively. Anomaly-based IDS and statistical-based IDS, respectively. Signature-based IDS and motion anomaly-based IDS, respectively.

ISC-Certified Information Systems Security Professionals Set 14

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

ISC-Certified Information Systems Security Professionals Set 14

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner