nerdexam
GIAC

GSNA · Question #137

Which of the following are the disadvantages of Dual-Homed Host Firewall Architecture?

The correct answer is A. It can provide services by proxying them. C. User accounts may unexpectedly enable services a user may not consider secure. D. It provides services when users log on to the dual-homed host directly. A dual-homed host is one of the firewall architectures for implementing preventive security. It provides the first-line defense and protection technology for keeping untrusted bodies from compromising information security by violating trusted network space as shown in the image…

Network & Perimeter Auditing

Question

Which of the following are the disadvantages of Dual-Homed Host Firewall Architecture?

Options

  • AIt can provide services by proxying them.
  • BIt can provide a very low level of control.
  • CUser accounts may unexpectedly enable services a user may not consider secure.
  • DIt provides services when users log on to the dual-homed host directly.

How the community answered

(41 responses)
  • A
    78% (32)
  • B
    22% (9)

Explanation

A dual-homed host is one of the firewall architectures for implementing preventive security. It provides the first-line defense and protection technology for keeping untrusted bodies from compromising information security by violating trusted network space as shown in the image below: A dual-homed host (or bastion host) is a system fortified with two network interfaces (NICs) that sits between an un-trusted network (like the Internet) and trusted network (such as a corporate network) to provide secure access. Dual-homed, or bastion, is a general term for proxies, gateways, firewalls, or any server that provides secured applications or services directly to an untrusted network. A dual-homed host also has some disadvantages, which are as follows: 1. It can provide services by proxying them. 2. User accounts may unexpectedly enable services a user may not consider secure. 3. It provides services when users log on to the dual-homed host directly. Answer: B is incorrect. Dual-Homed Host Firewall Architecture can provide a very high level of

Topics

#dual-homed host#firewall architecture#proxy services#bastion host

Community Discussion

No community discussion yet for this question.

Full GSNA Practice