CCP Network Perimeter Defense 3

Question 1

Which firewall rule processing model evaluates rules from top to bottom and stops at the first match?

Accepted Answer

First-match processing

Answer

Most firewalls use first-match (top-down) processing, so rule order is critical — more specific rules must appear before broader ones.

Question 2

A penetration tester discovers that the company's firewall allows all outbound traffic on port 443. Which attack vector does this MOST enable?

Accepted Answer

Command-and-control communications using HTTPS tunneling

Answer

Unrestricted outbound HTTPS allows malware to use port 443 for encrypted C2 communication, blending with legitimate web traffic.

Question 3

What is the role of a reverse proxy in perimeter defense?

Accepted Answer

It sits in front of internal servers and forwards external client requests to them

Answer

A reverse proxy accepts inbound connections on behalf of backend servers, hiding internal server details and enabling inspection or load balancing.

Question 4

An organization uses geolocation-based IP blocking at the perimeter. What is a significant limitation of this control?

Accepted Answer

Attackers can bypass it using VPNs or proxy servers in allowed regions

Answer

Geolocation blocking can be easily circumvented by routing traffic through a VPN exit node or proxy located in a permitted country.

Question 5

Which of the following BEST describes the function of a honeypot in perimeter defense?

Accepted Answer

It acts as a decoy system to detect and study attacker behavior

Answer

A honeypot is a decoy resource that attracts attackers, enabling defenders to detect intrusions and analyze attack techniques without risk to real assets.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP Network Perimeter Defense 3