Transcender :: Question of the Day

Today's Question

Taken from Cert-CISSP
Related Exam: ISC2 Cert-CISSP SecurityCert: CISSP
Item Number: Cert-CISSP.5.4.1

Your organization has decided to use one-time pads to ensure that certain confidential data is protected. All of the following statements are true regarding this type of cryptosystem, EXCEPT:

Each one-time pad can be used only once.

The pad must be made up of sequential values.

The pad must be as long as the message.

The pad must be distributed and stored in a secure manner.

Previous question and answer:

Taken from Cert-CISSP
Related Exam: ISC2 Cert-CISSP SecurityCert: CISSP
Item Number: Cert-CISSP.2.2.7

Which type of firewall hides a packet's true origin before sending it through another network?

bastion host
proxy firewall
stateful firewall
packet-filtering firewall

A proxy firewall hides a packet's true origin before sending it through another network. The primary security feature of a proxy firewall is that it hides the client information. It is the only computer on a network that communicates with untrusted computers.

A bastion host is a hardened system that usually resides on a demilitarized zone (DMZ) and is accessed frequently.

A stateful firewall forwards packets on behalf of the client. It examines each packet and permits or denies it passage based on many factors, including the state table. The state table is used to track where in the TCP handshake a connection is so that any frames that arrive that are received out of normal sequence (an indicator of possible malicious activity) can be dropped. This type of firewall is also often referred to as a stateful-inspection firewall.

A packet-filtering firewall forwards packets based on rules that define which traffic is permitted and denied on the network. A packet filtering firewall examines the data packet to get information about the source and destination addresses of an incoming packet, the session's communications protocol (TCP, UDP or ICMP), and the source destination application port for the desired service.

References:

CISSP Certification All-in-One Exam Guide, Chapter 7: Telecommunications and Network Security, Networking Devices, Firewalls, Proxy Firewalls, pp. 557-558

Previous Questions
Today
06/18/2013
06/17/2013
06/14/2013
06/13/2013
06/12/2013
06/11/2013
06/10/2013
06/07/2013
06/06/2013
06/05/2013
06/04/2013
06/03/2013
05/31/2013
05/30/2013
05/29/2013
05/28/2013
05/27/2013
05/24/2013
05/23/2013
05/22/2013
05/21/2013