Exam (elaborations)
CNIT 455 Exam I Questions and Answers
- Course
- Institution
Exam of 12 pages for the course CNIT at CNIT (CNIT 455 Exam I)
[Show more]
Content preview
CNIT 455 Exam IT/F A Packet Filter is hardware that limits connectivity – answer F (Software)
Packet filters block _______ and ______ traffic - answer ingress, egress
Packet filters use ____ based filtering - answerrule
Packet filter rules are combined into ________ - answer rulesets
T/F A good practice with packet filters is to allow what you want then deny all else. -
answerT
A firewall always includes a ______ ______ - answerpacket filter
T/F All packet filters are firewalls - answerF (Firewalls contain packet filters, not vice
versa)
T/F Windows firewall, iptables, and pfsense are examples of software "firewalls" -
answerT
T/F Packet filters are often used as a replacement in the IP stack on modern
implementations. - answerF (uncommon)
T/F Packet filters are often implemented as a specialized network device. - answerT
One should always use __ rather than ___ when configuring a packet filter, as the latter
is far easier to spoof. - answerIP, DNS
When filtering by IP, one should control access based on the ______/__________ IP
address. - answersource/destination
T/F Packet filters are vulnerable to IP address spoofing via ARP. - answerT
LSRR stands for - answerLoose Source Record Routing
T/F LSRR tells packets specific routes to gain access to otherwise unreachable
networks. - answerT
T/F LSRR prevents machines from spoofing addresses. - answerF (Enables spoofing,
as net traffic can still find the machine)
, T/F You should always enable LSRR on border routers and firewalls - answerF
(DISABLE IT)
UDP and TCP communication is based on numbered _____ - answerports
T/F UDP and TCP source and destination ports are standardized. - answerF (only
destination)
UDP and TCP ______ ports are chosen randomly, from port ____ and above -
answersource, 1024
The two types of port filtering are ______ and ________ - answerStatic, dynamic
Static port filtering involves only allowing traffic based on ____ number or IP/____
number combination - answerport
In static port filtering, each packet is checked _____________ - answerindependently
Dynamic port filtering is also known as ________ ______ __________ - answerstateful
packet inspection
Dynamic port filtering checks the _______ of the packet as well as ______ and
___________ addresses - answercontext, source, destination
T/F Destination Static Port Filtering involves examining and filtering based on source
port number - answerF (destination you dip)
The major limitation of Destination Static Port Filtering is that it only works if a server
responds to incoming messages on the _________ ____ - answerreceiving port
In source static port forwarding, source ports are typically randomly chosen from
numbers above ____ - answer1023
In source static port forwarding, after a server sends a message using a random port >
1023, the return traffic will be _______ by the firewall. - answerblocked
To work around the blocking caused by SSPF, you must ______ incoming traffic for
ports > 1023 - answerallow
T/F Allowing traffic for SSPF is a massive security problem. - answerT
By monitoring the source port for ingress traffic in SSPF, you have created a __-
__________ static filter - answerbi-directional
TCP Static Source Port Filtering consists of performing a check on the ___ bit of
outgoing TCP traffic - answerACK
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller julianah420. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
76658 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now