Please keep at least one language enabled. || కనీసం ఒక భాషను ఎంచుకోండి.
Question 1
ప్రశ్న 1
In firewall terminology, what is the fundamental role of an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An application-proxy gateway contains a proxy agent that acts as an intermediary between communicating hosts.
• It combines lower-layer access control with application-layer functionality.
• The gateway can apply firewall policy while examining application-level traffic.
• It combines lower-layer access control with application-layer functionality.
• The gateway can apply firewall policy while examining application-level traffic.
వివరణ:
Question 2
ప్రశ్న 2
When a client successfully communicates with a destination server through an application-proxy gateway, how is the communication normally established?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An application-proxy gateway prevents a direct end-to-end connection between the two communicating hosts.
• One connection exists between the client and proxy, and another exists between the proxy and actual destination.
• The proxy therefore participates directly in both sides of the communication.
• One connection exists between the client and proxy, and another exists between the proxy and actual destination.
• The proxy therefore participates directly in both sides of the communication.
వివరణ:
Question 3
ప్రశ్న 3
Which capability most clearly distinguishes an application-proxy gateway from a basic packet-filter firewall?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways operate with application-layer awareness.
• They can inspect application-protocol information and actual traffic content.
• Basic packet filters primarily make decisions from lower-layer header information such as addresses, protocols and ports.
• They can inspect application-protocol information and actual traffic content.
• Basic packet filters primarily make decisions from lower-layer header information such as addresses, protocols and ports.
వివరణ:
Question 4
ప్రశ్న 4
Which statement correctly describes direct client-to-server connectivity when an application-proxy gateway is being used as the intermediary?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The proxy sits logically between the client and the destination server.
• It terminates one connection and establishes another separate connection toward the destination.
• Preventing a direct connection is a defining characteristic of the application-proxy gateway architecture.
• It terminates one connection and establishes another separate connection toward the destination.
• Preventing a direct connection is a defining characteristic of the application-proxy gateway architecture.
వివరణ:
Question 5
ప్రశ్న 5
Why may internal host IP addresses be hidden from external hosts when traffic is handled through an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• External systems communicate with the proxy rather than directly with protected internal hosts.
• The proxy becomes the externally visible communication endpoint for the proxied connection.
• This can prevent internal IP addresses from being exposed directly to the outside system.
• The proxy becomes the externally visible communication endpoint for the proxied connection.
• This can prevent internal IP addresses from being exposed directly to the outside system.
వివరణ:
Question 6
ప్రశ్న 6
Why can support for many different applications become a challenge for an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Strong application-proxy functionality depends on understanding the particular application protocol being handled.
• An individual application-specific proxy agent may therefore be required for each supported type of traffic.
• This requirement can make support for new or uncommon applications more difficult.
• An individual application-specific proxy agent may therefore be required for each supported type of traffic.
• This requirement can make support for new or uncommon applications more difficult.
వివరణ:
Question 7
ప్రశ్న 7
Which capability may provide an application-proxy gateway with more granular user-based access control than a simple packet filter?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Some application-proxy gateways can authenticate individual network users.
• Authentication can support access decisions based on user identity rather than relying only on network addresses.
• Packet filters traditionally concentrate on fields such as IP addresses, protocols and ports rather than direct application-user authentication.
• Authentication can support access decisions based on user identity rather than relying only on network addresses.
• Packet filters traditionally concentrate on fields such as IP addresses, protocols and ports rather than direct application-user authentication.
వివరణ:
Question 8
ప్రశ్న 8
Why can an application-proxy gateway provide more detailed security logging than a basic packet-filter firewall?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways can inspect more of the traffic than basic header-oriented packet filters.
• Their logs may therefore include application-specific information and commands.
• Such detailed logging can assist security monitoring and investigations.
• Their logs may therefore include application-specific information and commands.
• Such detailed logging can assist security monitoring and investigations.
వివరణ:
Question 9
ప్రశ్న 9
Which is a potential performance disadvantage of application-proxy gateways compared with simpler packet-filtering firewalls?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways perform deeper inspection than simple packet filters.
• Reading and interpreting application-level traffic requires additional processing resources.
• This can introduce latency or throughput limitations, particularly for demanding real-time or high-bandwidth applications.
• Reading and interpreting application-level traffic requires additional processing resources.
• This can introduce latency or throughput limitations, particularly for demanding real-time or high-bandwidth applications.
వివరణ:
Question 10
ప్రశ్న 10
Which statement describes an important protocol-support disadvantage of application-proxy gateways?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways gain much of their security value from protocol-specific understanding.
• A suitable proxy agent is needed to provide full application-aware handling of a particular protocol.
• Supporting new or unusual protocols can therefore require additional development or configuration.
• A suitable proxy agent is needed to provide full application-aware handling of a particular protocol.
• Supporting new or unusual protocols can therefore require additional development or configuration.
వివరణ:
Question 11
ప్రశ్న 11
Which statement most accurately compares a basic packet filter with an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Basic packet filtering focuses mainly on network and transport header information.
• An application-proxy gateway terminates and relays communication as an intermediary.
• Its application-layer awareness permits deeper inspection than ordinary stateless packet filtering.
• An application-proxy gateway terminates and relays communication as an intermediary.
• Its application-layer awareness permits deeper inspection than ordinary stateless packet filtering.
వివరణ:
Question 12
ప్రశ్న 12
Which statement correctly distinguishes stateful inspection from an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Stateful inspection improves packet filtering by maintaining information about active network connections.
• An application-proxy gateway goes further by acting as an intermediary between communicating hosts.
• It can also understand and inspect application-level protocol content.
• An application-proxy gateway goes further by acting as an intermediary between communicating hosts.
• It can also understand and inspect application-level protocol content.
వివరణ:
Question 13
ప్రశ్న 13
Which advanced capability may be available in some application-proxy gateways when handling encrypted application traffic?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Some application-proxy gateways can terminate encrypted sessions and inspect the decrypted application content.
• After policy inspection, the gateway can establish encrypted communication toward the destination and re-encrypt permitted traffic.
• This capability depends on the gateway's features and configuration and should not be assumed for every proxy gateway.
• After policy inspection, the gateway can establish encrypted communication toward the destination and re-encrypt permitted traffic.
• This capability depends on the gateway's features and configuration and should not be assumed for every proxy gateway.
వివరణ:
Question 14
ప్రశ్న 14
An HTTP proxy gateway receives a request containing an application command that violates organizational policy, even though the source IP address and destination TCP port would otherwise be allowed. Which application-gateway capability allows it to block the request?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways can examine information above the network and transport layers.
• They can make permit-or-deny decisions based on application-protocol commands, headers or payload data.
• A simple address-and-port packet filter would not normally provide equivalent application-command awareness.
• They can make permit-or-deny decisions based on application-protocol commands, headers or payload data.
• A simple address-and-port packet filter would not normally provide equivalent application-command awareness.
వివరణ:
Question 15
ప్రశ్న 15
What is the relationship between a proxy agent and the firewall ruleset in an application-proxy gateway?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The proxy agent works with the firewall access-control ruleset.
• It evaluates whether a communication instance satisfies the organization's security policy.
• Only traffic judged permissible is forwarded toward the intended destination.
• It evaluates whether a communication instance satisfies the organization's security policy.
• Only traffic judged permissible is forwarded toward the intended destination.
వివరణ:
Question 16
ప్రశ్న 16
An internal user accesses an external web server through an HTTP application proxy. Which sequence best represents the communication?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The client communicates first with the application proxy rather than directly with the external server.
• The proxy evaluates the request and creates its own separate connection toward the destination when permitted.
• Responses return to the proxy and are then relayed to the client.
• The proxy evaluates the request and creates its own separate connection toward the destination when permitted.
• Responses return to the proxy and are then relayed to the client.
వివరణ:
Question 17
ప్రశ్న 17
Consider the following statements about application-proxy gateways:
1. They can act as intermediaries between communicating hosts.
2. They can inspect application-level traffic content.
3. Some can perform individual user authentication.
4. They always require less processing than a basic packet filter because they inspect less information.
Which statements are correct?
1. They can act as intermediaries between communicating hosts.
2. They can inspect application-level traffic content.
3. Some can perform individual user authentication.
4. They always require less processing than a basic packet filter because they inspect less information.
Which statements are correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Statements 1 and 2 correctly describe proxy intermediation and application-level inspection.
• Statement 3 is also correct because some proxy agents can require individual user authentication.
• Statement 4 is false because deeper application-level inspection generally requires more processing than simple packet filtering.
• Statement 3 is also correct because some proxy agents can require individual user authentication.
• Statement 4 is false because deeper application-level inspection generally requires more processing than simple packet filtering.
వివరణ:
Question 18
ప్రశ్న 18
Assertion (A): An application-proxy gateway can prevent a direct network connection between a protected client and the destination server for the proxied application.
Reason (R): The proxy terminates the client's connection and creates a separate connection between itself and the destination server.
Choose the correct answer.
Reason (R): The proxy terminates the client's connection and creates a separate connection between itself and the destination server.
Choose the correct answer.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy architecture places the proxy directly between the two communicating hosts.
• A successful proxied session consists of separate client-to-proxy and proxy-to-destination connections.
• Both statements are true, and the Reason correctly explains why the two end hosts do not establish a direct connection.
• A successful proxied session consists of separate client-to-proxy and proxy-to-destination connections.
• Both statements are true, and the Reason correctly explains why the two end hosts do not establish a direct connection.
వివరణ:
Question 19
ప్రశ్న 19
Match List I with List II:
List I
(a) Packet filter
(b) Stateful inspection
(c) Application-proxy gateway
(d) Proxy agent
List II
1. Acts as the application-specific intermediary for proxied traffic
2. Primarily evaluates packet-header criteria without maintaining connection state in its basic stateless form
3. Tracks information about the state of network connections
4. Can prevent direct host-to-host application connections while performing application-level inspection
Choose the correct matching code.
List I
(a) Packet filter
(b) Stateful inspection
(c) Application-proxy gateway
(d) Proxy agent
List II
1. Acts as the application-specific intermediary for proxied traffic
2. Primarily evaluates packet-header criteria without maintaining connection state in its basic stateless form
3. Tracks information about the state of network connections
4. Can prevent direct host-to-host application connections while performing application-level inspection
Choose the correct matching code.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Basic stateless packet filtering corresponds to header-oriented filtering without connection-state tracking, giving (a)-2.
• Stateful inspection tracks connections, giving (b)-3.
• An application-proxy gateway performs intermediary application-level inspection, giving (c)-4, while the proxy agent is the application-specific intermediary component, giving (d)-1.
• Stateful inspection tracks connections, giving (b)-3.
• An application-proxy gateway performs intermediary application-level inspection, giving (c)-4, while the proxy agent is the application-specific intermediary component, giving (d)-1.
వివరణ:
Question 20
ప్రశ్న 20
An organization must control an application not merely by source/destination addresses and ports, but also by application commands, content and authenticated user identity. Which firewall approach is most suitable among the following?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The requirement involves application-level commands, content and potentially authenticated user identity.
• An application-specific proxy can understand the application protocol and enforce more granular policies than a basic address-and-port packet filter.
• The proxy's intermediary architecture also allows application traffic to be inspected before being forwarded.
• An application-specific proxy can understand the application protocol and enforce more granular policies than a basic address-and-port packet filter.
• The proxy's intermediary architecture also allows application traffic to be inspected before being forwarded.
వివరణ:
Answer Key సమాధానాల పట్టిక
-
Question 1 ప్రశ్న 1Answer: B. To act as an intermediary between communicating hosts while applying firewall access-control and application-level processing సమాధానం: B.
-
Question 2 ప్రశ్న 2Answer: D. Two separate connections are created: client-to-proxy and proxy-to-destination. సమాధానం: D.
-
Question 3 ప్రశ్న 3Answer: A. It can inspect application-level protocol content and make decisions using information in application headers or payloads. సమాధానం: A.
-
Question 4 ప్రశ్న 4Answer: C. The proxy terminates the client connection and establishes a separate connection to the destination rather than allowing a direct connection between the two hosts. సమాధానం: C.
-
Question 5 ప్రశ్న 5Answer: C. External hosts communicate with the proxy agent rather than establishing a direct connection with the internal hosts. సమాధానం: C.
-
Question 6 ప్రశ్న 6Answer: A. An application-specific proxy agent is generally required for each type of application traffic that the gateway is expected to proxy securely. సమాధానం: A.
-
Question 7 ప్రశ్న 7Answer: D. Requiring individual user authentication before permitting specified application access సమాధానం: D.
-
Question 8 ప్రశ్న 8Answer: B. Its application awareness can allow logs to contain application-specific information or commands in addition to basic connection data. సమాధానం: B.
-
Question 9 ప్రశ్న 9Answer: A. Application-level inspection requires more processing because the gateway must read and interpret more of the traffic. సమాధానం: A.
-
Question 10 ప్రశ్న 10Answer: C. New or unsupported application protocols may require suitable new proxy agents before the gateway can provide full application-specific proxy protection. సమాధానం: C.
-
Question 11 ప్రశ్న 11Answer: D. A packet filter mainly uses packet-header criteria, whereas an application-proxy gateway can act as an intermediary and inspect application-level content. సమాధానం: D.
-
Question 12 ప్రశ్న 12Answer: B. Stateful inspection tracks connection state, while an application-proxy gateway additionally acts as an intermediary and can inspect application-level content. సమాధానం: B.
-
Question 13 ప్రశ్న 13Answer: C. Decrypting traffic when appropriately configured and capable, inspecting it, and then re-encrypting it before forwarding సమాధానం: C.
-
Question 14 ప్రశ్న 14Answer: A. Inspection of application-protocol headers or payload content సమాధానం: A.
-
Question 15 ప్రశ్న 15Answer: B. The proxy agent uses the firewall ruleset to determine whether particular traffic should be permitted to pass. సమాధానం: B.
-
Question 16 ప్రశ్న 16Answer: D. Client establishes a connection to the proxy; the proxy then establishes a separate connection to the external web server and relays permitted traffic. సమాధానం: D.
-
Question 17 ప్రశ్న 17Answer: D. 1, 2 and 3 only సమాధానం: D.
-
Question 18 ప్రశ్న 18Answer: C. Both Assertion and Reason are true, and Reason is the correct explanation of Assertion. సమాధానం: C.
-
Question 19 ప్రశ్న 19Answer: A. (a)-2, (b)-3, (c)-4, (d)-1 సమాధానం: A.
-
Question 20 ప్రశ్న 20Answer: B. An application-proxy gateway designed to understand and proxy that application protocol సమాధానం: B.