200-301 Question #712: Real Exam Question with Answer & Explanation

Question

Which two statements about firewalls are true ?

Options

• AThey can be used with an intrusion prevention system
• BThey can limit unauthorized user access to protect data
• CEach wireless access point requires its own firewall
• DThey must be placed only at locations where the private network connects to the internet
• EThey can prevent attacks from the internet only

Explanation

Firewalls serve to control network traffic based on predefined rules, limiting unauthorized access and protecting data by blocking malicious or unwanted connections. They are often deployed in conjunction with other security solutions, such as intrusion prevention systems, for comprehensive defense.

Common mistakes.

• C. Not every wireless access point requires its own dedicated firewall; network firewalls typically protect the entire network segment or perimeter where WAPs reside.
• D. Firewalls can be placed at various points within a network, including internal network segments (internal firewalls) and between different zones (e.g., DMZ), not just at the internet perimeter.
• E. Firewalls can prevent attacks originating from internal networks, between different internal segments, or from external sources like the internet, not exclusively from the internet.

Concept tested. Firewall functions and deployment

Reference. https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-firewall.html

No community discussion yet for this question.