CRT Network Security & Protocols 3

Question 1

What distinguishes a stateful firewall from a stateless (packet-filter) firewall?

Accepted Answer

It tracks the state of active network connections when filtering packets

Answer

A stateful firewall monitors the state of network connections and makes decisions based on context, not just individual packet headers.

Question 2

What is the purpose of a DMZ (Demilitarized Zone) in network architecture?

Accepted Answer

To isolate publicly accessible servers from the internal private network

Answer

A DMZ places public-facing servers (web, email) in a separate network segment, limiting exposure to the internal network if those servers are compromised.

Question 3

What does NAT (Network Address Translation) primarily accomplish?

Accepted Answer

Maps private internal IP addresses to one or more public IP addresses

Answer

NAT allows multiple devices on a private network to share a single public IP address, also providing a layer of obscurity for internal hosts.

Question 4

What is a site-to-site VPN primarily used for?

Accepted Answer

Connecting two entire networks securely over the public internet

Answer

A site-to-site VPN creates an encrypted tunnel between two network gateways, connecting entire office networks as if they were on the same LAN.

Question 5

What is the key difference between an IDS and an IPS?

Accepted Answer

An IDS detects and alerts on threats; an IPS can actively block them

Answer

An Intrusion Detection System (IDS) passively monitors and alerts, while an Intrusion Prevention System (IPS) sits inline and can block malicious traffic in real time.

(CRT) Certified Retail Tobacconist Practice Test

(CRT) Certified Retail Tobacconist Practice Test

CRT Network Security & Protocols 3