Please keep at least one language enabled. || కనీసం ఒక భాషను ఎంచుకోండి.
Question 1
ప్రశ్న 1
Which statement best defines a firewall in computer-network security?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A firewall controls network traffic between networks or hosts according to defined security rules.
• It can permit acceptable traffic and block traffic that violates the configured policy.
• A firewall may be implemented in hardware, software, or a combination of both.
• It can permit acceptable traffic and block traffic that violates the configured policy.
• A firewall may be implemented in hardware, software, or a combination of both.
వివరణ:
Question 2
ప్రశ్న 2
What is the primary purpose of a firewall policy?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A firewall policy defines the organization's requirements for handling network traffic.
• It guides which inbound and outbound communications should be allowed or blocked.
• Firewall rules are created and maintained to enforce this policy.
• It guides which inbound and outbound communications should be allowed or blocked.
• Firewall rules are created and maintained to enforce this policy.
వివరణ:
Question 3
ప్రశ్న 3
In a simple perimeter firewall protecting an internal LAN from an external network, which traffic is described as inbound traffic toward the protected LAN?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• In this perimeter-network context, inbound traffic moves from the external side toward the protected internal network.
• Firewall rules can determine whether such incoming traffic should be permitted or blocked.
• Traffic leaving the protected LAN toward the external network is outbound traffic.
• Firewall rules can determine whether such incoming traffic should be permitted or blocked.
• Traffic leaving the protected LAN toward the external network is outbound traffic.
వివరణ:
Question 4
ప్రశ్న 4
In the same perimeter-firewall context, which traffic is outbound from the protected internal LAN?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Outbound traffic originates on the protected side and moves toward an external network in this context.
• Firewalls can apply outbound restrictions as well as inbound restrictions.
• Controlling outbound traffic can help prevent prohibited external connections from internal systems.
• Firewalls can apply outbound restrictions as well as inbound restrictions.
• Controlling outbound traffic can help prevent prohibited external connections from internal systems.
వివరణ:
Question 5
ప్రశ్న 5
What does a 'deny by default' firewall policy mean?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Deny by default means that traffic not explicitly authorized by policy is blocked.
• Necessary communication is permitted through specific exceptions or allow rules.
• This approach reduces exposure compared with permitting everything that has not been expressly prohibited.
• Necessary communication is permitted through specific exceptions or allow rules.
• This approach reduces exposure compared with permitting everything that has not been expressly prohibited.
వివరణ:
Question 6
ప్రశ్న 6
Which information is commonly examined by basic IP packet-filtering firewall rules?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Packet-filtering rules can inspect network and transport header information.
• Common rule criteria include source address, destination address, protocol and TCP or UDP port numbers.
• Such filtering decisions concern network traffic rather than unrelated computer-display or storage characteristics.
• Common rule criteria include source address, destination address, protocol and TCP or UDP port numbers.
• Such filtering decisions concern network traffic rather than unrelated computer-display or storage characteristics.
వివరణ:
Question 7
ప్రశ్న 7
What distinguishes a stateful-inspection firewall from a simple stateless packet filter?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Stateful inspection maintains information about active network connections in a state table.
• Incoming packets can be checked to determine whether they correspond to an expected or established communication state.
• A simple stateless filter evaluates individual packets without maintaining equivalent connection-state information.
• Incoming packets can be checked to determine whether they correspond to an expected or established communication state.
• A simple stateless filter evaluates individual packets without maintaining equivalent connection-state information.
వివరణ:
Question 8
ప్రశ్న 8
Which description best matches a host-based firewall?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A host-based firewall runs on or protects an individual host or endpoint.
• It can apply traffic-control rules specifically to communications involving that computer.
• Network firewalls instead commonly protect multiple systems by filtering traffic between network segments.
• It can apply traffic-control rules specifically to communications involving that computer.
• Network firewalls instead commonly protect multiple systems by filtering traffic between network segments.
వివరణ:
Question 9
ప్రశ్న 9
Which statement best describes a network firewall deployed between an organization's internal network and an external network?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A network firewall can enforce security policy on traffic that passes between network segments.
• A perimeter firewall commonly controls traffic between an internal network and external networks.
• It is one layer of security and does not eliminate the need for other security measures.
• A perimeter firewall commonly controls traffic between an internal network and external networks.
• It is one layer of security and does not eliminate the need for other security measures.
వివరణ:
Question 10
ప్రశ్న 10
An organization operates a public HTTPS server. Its firewall should permit required HTTPS connections to that server but block other unsolicited inbound connections that are not authorized. Which configuration principle best matches this requirement?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Firewall policy should permit traffic required for legitimate services while blocking unnecessary or unauthorized traffic.
• The HTTPS service can therefore receive explicitly permitted traffic without opening unrelated services.
• This reflects controlled access rather than unrestricted inbound connectivity.
• The HTTPS service can therefore receive explicitly permitted traffic without opening unrelated services.
• This reflects controlled access rather than unrestricted inbound connectivity.
వివరణ:
Question 11
ప్రశ్న 11
Why is firewall logging useful in security management?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Firewall logs can provide records of events such as allowed or blocked network traffic.
• Administrators can use these records during monitoring, troubleshooting and investigation of suspicious activity.
• Logging supports security management but does not replace a properly designed firewall policy.
• Administrators can use these records during monitoring, troubleshooting and investigation of suspicious activity.
• Logging supports security management but does not replace a properly designed firewall policy.
వివరణ:
Question 12
ప్రశ్న 12
Which statement correctly describes ingress filtering and egress filtering?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Ingress filtering refers to filtering network traffic as it comes into a network or interface context.
• Egress filtering refers to filtering traffic as it leaves.
• Security policies can therefore control both incoming and outgoing communication.
• Egress filtering refers to filtering traffic as it leaves.
• Security policies can therefore control both incoming and outgoing communication.
వివరణ:
Question 13
ప్రశ్న 13
A compromised internal computer attempts to send unauthorized traffic to systems on the Internet. Which firewall control is most directly relevant to stopping such traffic as it leaves the organization's network?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Egress filtering controls traffic leaving the protected network.
• It can restrict inappropriate connections or suspicious traffic originating from internal systems.
• Outbound controls are therefore relevant when a compromised internal host attempts unauthorized external communication.
• It can restrict inappropriate connections or suspicious traffic originating from internal systems.
• Outbound controls are therefore relevant when a compromised internal host attempts unauthorized external communication.
వివరణ:
Question 14
ప్రశ్న 14
Which statement about Network Address Translation (NAT) and firewalls is technically correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• NAT translates network address information and is fundamentally associated with routing/connectivity functions.
• NIST specifically cautions that NAT should not itself be considered a type of firewall.
• Devices can combine NAT and firewall features, but the two functions remain conceptually distinct.
• NIST specifically cautions that NAT should not itself be considered a type of firewall.
• Devices can combine NAT and firewall features, but the two functions remain conceptually distinct.
వివరణ:
Question 15
ప్రశ్న 15
Why can encrypted network traffic create a limitation for some firewall inspection functions when the firewall does not decrypt that traffic?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Encryption can hide application content from devices that do not have the ability or authorization to decrypt it.
• A firewall may still evaluate visible header or connection information, depending on its capabilities and placement.
• Therefore encryption can limit content inspection without making all firewall operation impossible.
• A firewall may still evaluate visible header or connection information, depending on its capabilities and placement.
• Therefore encryption can limit content inspection without making all firewall operation impossible.
వివరణ:
Question 16
ప్రశ్న 16
An organization requires only HTTPS access from the Internet to one public web server and has no business need for other unsolicited inbound connections. Which firewall-policy approach best follows the principle of minimizing unnecessary access?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Firewall rules should provide only the network access required for legitimate services.
• Explicitly permitting necessary HTTPS traffic while denying unnecessary unsolicited inbound traffic reduces exposure.
• This approach is consistent with deny-by-default and least-access security principles.
• Explicitly permitting necessary HTTPS traffic while denying unnecessary unsolicited inbound traffic reduces exposure.
• This approach is consistent with deny-by-default and least-access security principles.
వివరణ:
Question 17
ప్రశ్న 17
Consider the following statements about basic firewall operation:
1. A firewall can control network traffic according to security rules.
2. Firewall policy can address both inbound and outbound traffic.
3. A firewall guarantees protection from every possible attack, including traffic that never passes through it.
4. A stateful firewall can track information about active connections.
Which statements are correct?
1. A firewall can control network traffic according to security rules.
2. Firewall policy can address both inbound and outbound traffic.
3. A firewall guarantees protection from every possible attack, including traffic that never passes through it.
4. A stateful firewall can track information about active connections.
Which statements are correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Statements 1 and 2 correctly describe firewall traffic control and bidirectional policy capabilities.
• Statement 3 is false because a firewall cannot provide absolute protection, particularly against traffic or activity that does not traverse or fall within its inspection capabilities.
• Statement 4 is correct because stateful inspection maintains connection-state information.
• Statement 3 is false because a firewall cannot provide absolute protection, particularly against traffic or activity that does not traverse or fall within its inspection capabilities.
• Statement 4 is correct because stateful inspection maintains connection-state information.
వివరణ:
Question 18
ప్రశ్న 18
Assertion (A): A perimeter firewall cannot reliably filter an attack path that completely bypasses that firewall.
Reason (R): A firewall can enforce its traffic rules only on communication that reaches and passes through a point where the firewall can inspect or control it.
Choose the correct answer.
Reason (R): A firewall can enforce its traffic rules only on communication that reaches and passes through a point where the firewall can inspect or control it.
Choose the correct answer.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A firewall protects network paths on which traffic is actually subjected to its controls.
• Traffic using an uncontrolled path that bypasses the firewall cannot be filtered by that firewall at the bypassed point.
• Both statements are true, and the Reason correctly explains the Assertion.
• Traffic using an uncontrolled path that bypasses the firewall cannot be filtered by that firewall at the bypassed point.
• Both statements are true, and the Reason correctly explains the Assertion.
వివరణ:
Question 19
ప్రశ్న 19
Match List I with List II:
List I
(a) Firewall policy
(b) Stateful inspection
(c) Ingress filtering
(d) Egress filtering
List II
1. Filtering incoming network traffic
2. Rules defining how network traffic should be handled
3. Filtering outgoing network traffic
4. Tracking connection state while evaluating traffic
Choose the correct matching code.
List I
(a) Firewall policy
(b) Stateful inspection
(c) Ingress filtering
(d) Egress filtering
List II
1. Filtering incoming network traffic
2. Rules defining how network traffic should be handled
3. Filtering outgoing network traffic
4. Tracking connection state while evaluating traffic
Choose the correct matching code.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Firewall policy defines traffic-handling rules, giving (a)-2.
• Stateful inspection tracks connection state, giving (b)-4.
• Ingress means incoming filtering, giving (c)-1, while egress means outgoing filtering, giving (d)-3.
• Stateful inspection tracks connection state, giving (b)-4.
• Ingress means incoming filtering, giving (c)-1, while egress means outgoing filtering, giving (d)-3.
వివరణ:
Question 20
ప్రశ్న 20
A firewall policy says: 'Permit employees to initiate approved web connections to the Internet; permit the corresponding legitimate return traffic; block unsolicited inbound connections that are not otherwise authorized.' Which firewall capability most directly supports recognizing legitimate return packets as belonging to an already permitted connection?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Stateful inspection maintains information about permitted network connections in a state table.
• Return traffic can be checked against the recorded connection state to determine whether it belongs to an expected communication session.
• This provides more context than treating every packet as completely independent.
• Return traffic can be checked against the recorded connection state to determine whether it belongs to an expected communication session.
• This provides more context than treating every packet as completely independent.
వివరణ:
Answer Key సమాధానాల పట్టిక
-
Question 1 ప్రశ్న 1Answer: B. A device or program that controls the flow of network traffic according to security rules or policy సమాధానం: B.
-
Question 2 ప్రశ్న 2Answer: D. To specify how the firewall should handle permitted and prohibited network traffic, including inbound and outbound traffic సమాధానం: D.
-
Question 3 ప్రశ్న 3Answer: A. Traffic arriving from the external network and moving toward the internal LAN సమాధానం: A.
-
Question 4 ప్రశ్న 4Answer: C. Traffic leaving the internal LAN toward an external network సమాధానం: C.
-
Question 5 ప్రశ్న 5Answer: C. Traffic is blocked unless it has been expressly permitted by the firewall policy. సమాధానం: C.
-
Question 6 ప్రశ్న 6Answer: A. Source and destination addresses, protocol information and source or destination ports where applicable సమాధానం: A.
-
Question 7 ప్రశ్న 7Answer: D. It tracks the state of network connections and evaluates packets in relation to existing connection state. సమాధానం: D.
-
Question 8 ప్రశ్న 8Answer: B. A firewall installed on an individual computer or host to control network traffic to and from that host సమాధానం: B.
-
Question 9 ప్రశ్న 9Answer: A. It can inspect and control traffic crossing between the networks according to the configured policy. సమాధానం: A.
-
Question 10 ప్రశ్న 10Answer: C. Allow the specifically required traffic and deny unauthorized inbound traffic. సమాధానం: C.
-
Question 11 ప్రశ్న 11Answer: B. It can record firewall events and traffic decisions for monitoring, troubleshooting and security analysis. సమాధానం: B.
-
Question 12 ప్రశ్న 12Answer: D. Ingress filtering concerns incoming traffic, while egress filtering concerns outgoing traffic. సమాధానం: D.
-
Question 13 ప్రశ్న 13Answer: D. Outbound or egress filtering సమాధానం: D.
-
Question 14 ప్రశ్న 14Answer: B. NAT is primarily an address-translation/routing-related function and should not by itself be treated as equivalent to firewall protection. సమాధానం: B.
-
Question 15 ప్రశ్న 15Answer: C. The firewall may be unable to inspect the encrypted application payload even though it can still evaluate information that remains visible. సమాధానం: C.
-
Question 16 ప్రశ్న 16Answer: A. Permit the required HTTPS traffic and block other unsolicited inbound traffic that is not expressly authorized. సమాధానం: A.
-
Question 17 ప్రశ్న 17Answer: B. 1, 2 and 4 only సమాధానం: B.
-
Question 18 ప్రశ్న 18Answer: D. Both Assertion and Reason are true, and Reason is the correct explanation of Assertion. సమాధానం: D.
-
Question 19 ప్రశ్న 19Answer: A. (a)-2, (b)-4, (c)-1, (d)-3 సమాధానం: A.
-
Question 20 ప్రశ్న 20Answer: C. Stateful inspection using connection-state information సమాధానం: C.