Which of the following operates on the HIGHEST layer of the OSI model, and is the most effective at blocking application attacks?

Which of the following operates on the HIGHEST layer of the OSI model, and is the most effective at blocking application attacks?

A.IDS
B. Router
C. WAF(Web application firewall)
D. Stateless firewall


Answer: C

Network administrators connect to a legacy server using Telnet. They want to secure these transmissions using encryption at a lower layer of the OSI model. What could they use?

Network administrators connect to a legacy server using Telnet. They want to secure these transmissions using encryption at a lower layer of the OSI model. What could they use?

AIPv4
B. IPv6
C. SSH
D. SFTP


Answer: B

Your organization hosts a web server and wants to increase its security. You need to separate all web-facing traffic from internal network traffic. Which of the following provides the BEST solution?

Your organization hosts a web server and wants to increase its security. You need to separate all web-facing traffic from internal network traffic. Which of the following provides the BEST solution?

A.VLAN
B. Firewall
C. DMZ
D. WAF


Answer: C

Your organization wants to combine some of the security controls used on the network. What could your organization implement to meet this goal?

Your organization wants to combine some of the security controls used on the network. What could your organization implement to meet this goal?

A. SSO
B. UTM
C. VPN
D. VLAN


Answer: B

Your organization wants to prevent users from accessing file sharing web sites. Which of the following choices will meet this need?

Your organization wants to prevent users from accessing file sharing web sites. Which of the following choices will meet this need?

A.Content inspection
B. Malware inspection
C. URL filter
D. Web application firewall


Answer: C

You have detected DNS requests and zone transfer requests coming through the firewall and you need to block them. Which of the following would meet this goal? (Select TWO. Each answer is a full solution)

Your network currently has a dedicated firewall protecting access to a web server. It is currently configured with the following two rules in the ACL along with an implicit allow rule at the end:
PERMIT TCP ANY ANY 443
PERMIT TCP ANY ANY 80

You have detected DNS requests and zone transfer requests coming through the firewall and you need to block them. Which of the following would meet this goal? (Select TWO. Each answer is a full solution) 

A. Add the following rule to the firewall: DENY TCP ALL ALL 53.
B. Add the following rule to the firewall: DENY UDP ALL ALL 53.
C. Add the following rule to the firewall: DENY TCP ALL ALL 25.
D. Add the following rule to the firewall: DENY IP ALL ALL 53.
E. Change the implicit allow rule to implicit deny.


Answer: D & E