Security Technology: Access Controls, Firewalls, and VPNs

9764Review Questions:

1. What is the typical relationship among the untrusted network, the firewall, and the
trusted network?
2. What is the relationship between a TCP packet and UDP packet? Will any specific
transaction usually involve both types of packets?
3. How is an application layer proxy firewall different from a packet-filtering firewall?
4. How is static filtering different from dynamic filtering of packets? Which is perceived to
offer improved security?
5. What is stateful inspection? How is state information maintained during a network
connection or transaction?
6. Explain the conceptual approach that should guide the creation of firewall rule sets.
7. What special function does a cache server perform? Why is this useful for larger
organizations?
8. Describe how the various types of firewalls interact with network traffic at various
levels of the OSI model.
9. What is a hybrid firewall?
10. Describe Unified Threat Management. Why might it be a better approach than singlepoint solutions that perform the same functions? How does UTM differ from Next
Generation Firewalls?
11. What is a Next Generation Firewall (NextGen or NGFW)?
12. What is the primary value of a firewall?
13. What is Port Address Translation (PAT) and how does it work?
14. How do screened host architectures for firewalls differ from screened subnet firewall
architectures? Which offers more security for the information assets that remain on the
trusted network?
15. What is a sacrificial host? What is a bastion host?
16. What is a DMZ? Is this really an appropriate name for the technology, considering the
function this type of subnet performs?
17. What questions must be addressed when selecting a firewall for a specific organization?
18. What is RADIUS? What advantage does it have over TACACS?
19. What is a content filter? Where is it placed in the network to gain the best result for the
organization?
20. What is a VPN? Why is it becoming more widely used?