NSE NSE Firewall & Perimeter Security 2

Question 1

What is the purpose of egress filtering on a perimeter firewall?

Accepted Answer

To restrict unauthorized outbound traffic leaving the internal network

Answer

Egress filtering prevents compromised internal hosts from exfiltrating data or communicating with command-and-control servers on the internet.

Question 2

Which technology is used to allow remote users to securely traverse a perimeter firewall and access internal resources?

Accepted Answer

VPN (Virtual Private Network)

Answer

VPNs create an encrypted tunnel through the perimeter firewall, allowing authenticated remote users to securely access internal network resources.

Question 3

In firewall policy, what does the term 'rule shadowing' mean?

Accepted Answer

A rule that can never be matched because a preceding rule already matches that traffic

Answer

Rule shadowing occurs when a broader rule earlier in the policy matches all traffic intended for a more specific rule, making the specific rule unreachable.

Question 4

Which attack specifically targets the firewall's connection state table to exhaust its resources?

Accepted Answer

SYN flood attack

Answer

A SYN flood sends large numbers of half-open TCP connection requests to fill the stateful firewall's connection table, causing denial of service.

Question 5

What is the role of a Web Application Firewall (WAF) compared to a network perimeter firewall?

Accepted Answer

A WAF specifically inspects HTTP/HTTPS traffic to protect web applications from Layer 7 attacks

Answer

A WAF operates at the application layer to detect and block web-specific attacks such as SQL injection, XSS, and CSRF targeting web applications.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE NSE Firewall & Perimeter Security 2