NSE NSE Firewall & Perimeter Security

Question 1

Which firewall type inspects packets at the application layer and can understand specific protocols like HTTP or FTP?

Accepted Answer

Application-layer (proxy) firewall

Answer

Packet-filtering firewall

Answer

Stateful inspection firewall

Answer

Circuit-level gateway

Question 2

In a DMZ architecture, which statement BEST describes the purpose of placing a web server in the DMZ?

Accepted Answer

To expose the web server to the internet while shielding the internal network

Answer

To grant the web server unrestricted access to the internal LAN

Answer

To eliminate the need for firewalls between zones

Answer

To allow the web server to bypass stateful inspection

Question 3

What is the primary advantage of a stateful firewall over a simple packet-filtering firewall?

Accepted Answer

It tracks the state of active connections to validate return traffic

Answer

It operates exclusively at Layer 2

Answer

It decrypts all SSL/TLS traffic by default

Answer

It requires no rule configuration

Question 4

Which technique do attackers use to bypass firewall rules by encapsulating malicious traffic inside an allowed protocol?

Accepted Answer

Tunneling

Answer

ARP poisoning

Answer

MAC flooding

Answer

DNS zone transfer

Question 5

A next-generation firewall (NGFW) differentiates itself from a traditional stateful firewall primarily by:

Accepted Answer

Adding deep packet inspection and application awareness

Answer

Filtering only UDP traffic

Answer

Blocking all encrypted traffic

Answer

Operating only on inbound traffic

Question 6

Which firewall rule action BEST follows a deny-by-default (implicit deny) security posture?

Accepted Answer

Block all traffic unless explicitly permitted

Answer

Allow all traffic unless explicitly denied

Answer

Allow inbound and block outbound

Answer

Block UDP and allow TCP by default