NSE NSE Firewall & Perimeter Security 1

Question 1

Which firewall type inspects packets at the application layer and can understand specific protocols like HTTP or FTP?

Accepted Answer

Application-layer (proxy) firewall

Answer

Application-layer proxy firewalls operate at OSI Layer 7, understanding application protocols and inspecting payload content for policy enforcement.

Question 2

In a DMZ architecture, which statement BEST describes the purpose of placing a web server in the DMZ?

Accepted Answer

To expose the web server to the internet while shielding the internal network

Answer

A DMZ isolates publicly accessible servers so that a compromise does not provide direct access to the trusted internal network.

Question 3

What is the primary advantage of a stateful firewall over a simple packet-filtering firewall?

Accepted Answer

It tracks the state of active connections to validate return traffic

Answer

Stateful firewalls maintain a connection table, allowing them to permit only legitimate return packets and block unsolicited inbound traffic.

Question 4

Which technique do attackers use to bypass firewall rules by encapsulating malicious traffic inside an allowed protocol?

Accepted Answer

Tunneling

Answer

Tunneling encapsulates one protocol inside another (e.g., HTTP or DNS) to bypass firewall port restrictions and carry unauthorized traffic.

Question 5

A next-generation firewall (NGFW) differentiates itself from a traditional stateful firewall primarily by:

Accepted Answer

Adding deep packet inspection and application awareness

Answer

NGFWs incorporate deep packet inspection, application identification, user-identity awareness, and integrated IPS capabilities beyond traditional stateful inspection.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE NSE Firewall & Perimeter Security 1