PCNSE Firewall Technology and Architecture Flashcards

A virtual container known as a ____ is used to encapsulate data delivered across an Ethernet network.

Answer: frame

In Ethernet networks, data is encapsulated into a virtual container known as a frame for transmission. A frame includes the actual data payload along with essential header and trailer information, such as source and destination MAC addresses, error-checking codes, and other control fields. This structured format allows data to be efficiently and reliably delivered across the Ethernet network.

An addressable device on a network that can receive, process, and react to network signals is known as a .

Answer: network node

A network node is any addressable device connected to a network that can send, receive, and process network signals. This broad definition includes various devices such as computers, servers, printers, routers, and switches, all of which contribute to the network's functionality. Each node has a unique identifier, like an IP address or MAC address, allowing it to communicate within the network.

It's called ____ to recognize a person automatically using their physical or behavioral traits.

Answer: Biometrics

Biometrics refers to the automatic recognition of individuals based on their unique physical or behavioral traits. This technology utilizes distinct characteristics such as fingerprints, facial features, iris patterns, or voice recognition for identification and authentication purposes. Biometric systems offer a secure and convenient method of verifying identity, widely used in access control and security systems.

A ____ is a firewall.

Answer: security system consisting of software and hardware between an internal network and the Internet

A firewall is a critical security system, comprising both software and hardware, that acts as a protective barrier between a trusted internal network and untrusted external networks like the Internet. Its primary function is to monitor and control incoming and outgoing network traffic based on predefined security rules. This helps to prevent unauthorized access and protect the internal network from various cyber threats.

A dramatic increase in the number of message packets being transmitted into the network was detected by the network administrator of the Chocolate Biscuit International company. He begins procedures to look into the cause of the increase. The system crashes and shuts down before he could find anything out from his inquiry. Attacks on Chocolate Biscuit International could happen.

Answer: Denial of Service

The scenario described, with a dramatic increase in message packets overwhelming the network and causing a system crash, is a classic indication of a Denial of Service (DoS) attack. A DoS attack aims to make a machine or network resource unavailable to its intended users by flooding it with traffic or requests, thereby preventing legitimate access. This disruption can lead to significant operational downtime.

Which of the following describes an access policy for a firewall?

Answer: It provides a set of rules that determine who gets in or out of your network and who doesn't

An access policy for a firewall provides a set of rules that explicitly determine who gets in or out of your network and who doesn't. These rules define criteria such as source and destination IP addresses, ports, protocols, and applications, governing which network connections are permitted or denied. This granular control is fundamental to network security, protecting against unauthorized access and malicious traffic.