Network Security and Firewalls Questions and Answers

Q: Operating system level firewall provides an advantage over a Network level firewall by allowing traffic control/filter according to .......................

An operating-system level firewall can filter by Application Programs.A host-based firewall runs on the computer itself, so it can see which program is opening each connection. It can allow a browser to reach the internet while blocking an unknown program, even when both use the same port and protocol.A network-level firewall sits between networks and sees only packets, so it can already filter by IP address and port number, and application-layer gateways can inspect protocols. None of these is the host firewall's particular advantage; knowing the individual program is.

Q: Which characteristic differentiates a transport-layer firewall from a packet-filtering firewall ?

The difference is the ability to block based on TCP flags and connection states.A simple packet-filtering firewall judges each packet on its own, by source and destination address, port and protocol. A transport-layer (stateful or circuit-level) firewall also tracks TCP sessions: it reads the SYN, ACK, FIN and RST flags, keeps a state table of open connections and lets a packet through only if it belongs to a legitimate session, so a stray ACK with no handshake behind it is dropped.Inspecting application payloads is the job of an application-layer firewall or proxy, a level higher. Modifying routing tables is a router's function, and detecting encrypted traffic is not what separates these two kinds.

Q: The protocol used for secure communication over the Internet is

The protocol for secure communication is HTTPS.HTTPS is HTTP carried over TLS (formerly SSL), normally on port 443. TLS encrypts the traffic, checks the server's identity through its certificate and detects tampering, so passwords, payment details and other data cannot be read or altered in transit.FTP, Telnet and plain POP3 all send data, including usernames and passwords, in clear text. Their secure replacements are SFTP or FTPS, SSH, and POP3S.

Q: Which protocol is used for secure data transmission over the web ?

The protocol is TLS/SSL.Transport Layer Security, and its deprecated predecessor SSL, encrypts the connection between client and server, checks data integrity and authenticates the server with certificates. HTTPS is HTTP running over TLS.FTP and HTTP send data in plain text. SMTP is the mail transfer protocol and is unencrypted by default, though it can be secured with STARTTLS, which is itself TLS.

Q: Which of the below security encryption standards is the weakest ?

The weakest standard is WEP.Wired Equivalent Privacy (1997) uses the RC4 cipher with short, reused initialisation vectors, and its keys can be recovered within minutes with freely available tools. It is deprecated.WPA (2003) was an interim fix, WPA2 (2004) introduced AES-based CCMP encryption, and WPA3 (2018) is the current and strongest standard.Networks still using WEP or the original WPA should be moved to WPA2 or WPA3.

Q: __________ creates an isolated passage across a public network that enables computing devices to communicate and receive data discreetly as though they were directly linked to the private network.

The technology is a Virtual Private Network.A VPN creates an encrypted tunnel across a public network such as the internet, so that devices can exchange data privately as though they were directly connected to a private network. Remote employees use it to reach office systems securely.'Visual Private Network', 'Virtual Protocol Network' and 'Virtual Protocol Networking' are distortions of the name, not real technologies.

Which of the following firewalls examine traffic and filter on application-specific commands such as http:post or http:get?

A.Application gateways
B.Stateful multilayer inspection firewalls
C.Circuit level gateways
D.Packet filters

Exam Year(s)

DSSSB TGT - 2023,

Answer: A

Application gateways, also called proxy firewalls, examine traffic and filter on application-specific commands such as http:post or http:get, since they work at the application layer. Packet filters look only at the header information of the packets, circuit level gateways check the validity of the connection or session and not the commands inside it, and stateful multilayer inspection firewalls track the state of connections, so these three are not the ones filtering on application commands.

Discuss in Forum

Operating system level firewall provides an advantage over a Network level firewall by allowing traffic control/filter according to .......................

A.IP Addresses
B.Port Numbers
C.Application Layer Protocols
D.Application Programs

Exam Year(s)

MH SET - 2019, SET Exam - 2019,

Answer: D

An operating-system level firewall can filter by Application Programs.

A host-based firewall runs on the computer itself, so it can see which program is opening each connection. It can allow a browser to reach the internet while blocking an unknown program, even when both use the same port and protocol.

A network-level firewall sits between networks and sees only packets, so it can already filter by IP address and port number, and application-layer gateways can inspect protocols. None of these is the host firewall's particular advantage; knowing the individual program is.

Discuss in Forum

Which characteristic differentiates a transport-layer firewall from a packet-filtering firewall ?

A.Ability to modify routing tables dynamically
B.Ability to detect encrypted traffic
C.Ability to block based on TCP flags and connection states
D.Ability to inspect application payloads

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: C

The difference is the ability to block based on TCP flags and connection states.

A simple packet-filtering firewall judges each packet on its own, by source and destination address, port and protocol. A transport-layer (stateful or circuit-level) firewall also tracks TCP sessions: it reads the SYN, ACK, FIN and RST flags, keeps a state table of open connections and lets a packet through only if it belongs to a legitimate session, so a stray ACK with no handshake behind it is dropped.

Inspecting application payloads is the job of an application-layer firewall or proxy, a level higher. Modifying routing tables is a router's function, and detecting encrypted traffic is not what separates these two kinds.

Discuss in Forum

The protocol used for secure communication over the Internet is

A.FTP
B.Telnet
C.HTTPS
D.POP3

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: C

The protocol for secure communication is HTTPS.

HTTPS is HTTP carried over TLS (formerly SSL), normally on port 443. TLS encrypts the traffic, checks the server's identity through its certificate and detects tampering, so passwords, payment details and other data cannot be read or altered in transit.

FTP, Telnet and plain POP3 all send data, including usernames and passwords, in clear text. Their secure replacements are SFTP or FTPS, SSH, and POP3S.

Discuss in Forum

Which protocol is used for secure data transmission over the web ?

A.FTP
B.HTTP
C.TLS/SSL
D.SMTP

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: C

The protocol is TLS/SSL.

Transport Layer Security, and its deprecated predecessor SSL, encrypts the connection between client and server, checks data integrity and authenticates the server with certificates. HTTPS is HTTP running over TLS.

FTP and HTTP send data in plain text. SMTP is the mail transfer protocol and is unencrypted by default, though it can be secured with STARTTLS, which is itself TLS.

Discuss in Forum

Which of the below security encryption standards is the weakest ?

A.WPA3
B.WPA2
C.WPA
D.WEP

Exam Year(s)

Tripura Public Service Commission - 2025,

Answer: D

The weakest standard is WEP.

Wired Equivalent Privacy (1997) uses the RC4 cipher with short, reused initialisation vectors, and its keys can be recovered within minutes with freely available tools. It is deprecated.

WPA (2003) was an interim fix, WPA2 (2004) introduced AES-based CCMP encryption, and WPA3 (2018) is the current and strongest standard.

Networks still using WEP or the original WPA should be moved to WPA2 or WPA3.

Discuss in Forum

__________ creates an isolated passage across a public network that enables computing devices to communicate and receive data discreetly as though they were directly linked to the private network.

A.Visual Private Network
B.Virtual Protocol Network
C.Virtual Protocol Networking
D.Virtual Private Network

Exam Year(s)

Tripura Public Service Commission - 2025,

Answer: D

The technology is a Virtual Private Network.

A VPN creates an encrypted tunnel across a public network such as the internet, so that devices can exchange data privately as though they were directly connected to a private network. Remote employees use it to reach office systems securely.

'Visual Private Network', 'Virtual Protocol Network' and 'Virtual Protocol Networking' are distortions of the name, not real technologies.

Discuss in Forum

A method to provide secure transmission of email is called ____.

A.TLS
B.SA
C.IPSec
D.PGP

Exam Year(s)

UGC NET - 2013,

Answer: D

PGP, Pretty Good Privacy, is a method which gives secure transmission of email. It encrypts the message and signs it digitally, so that only the receiver can read it and the receiver can verify the sender.

TLS secures a connection at the transport layer, IPSec secures traffic at the network layer, and SA is a security association of IPSec. They are not methods for protecting an email message itself. Option D is correct. PGP uses public key cryptography together with a symmetric session key, and it also provides authentication through digital signatures.

Discuss in Forum

SET, an open encryption and security specification model that is designed for protecting credit card transactions on the internet, stands for

A.Secure Electronic Transaction
B.Secular Enterprise for Transaction
C.Security Electronic Transmission
D.Secured Electronic Termination

Exam Year(s)

UGC NET - 2014,

Answer: A

SET stands for Secure Electronic Transaction, an open specification developed by Visa and MasterCard in the 1990s to protect credit card payments over the internet, using digital certificates and encryption. The other expansions, Secular Enterprise for Transaction, Security Electronic Transmission and Secured Electronic Termination, are not the name of any protocol. The protocol was meant to give the customer, the merchant and the bank a way to verify each other, and to keep the card number from the merchant.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Network Security and Firewalls Questions and Answers || Network Security and Firewalls MCQ Questions and Answers || Network Security and Firewalls GK Questions and Answers || Network Security and Firewalls GK MCQ Questions || Network Security and Firewalls Multiple Choice Questions and Answers || Network Security and Firewalls GK || GK on Network Security and Firewalls || Cyber Security Questions and Answers || Cyber Security MCQ Questions and Answers || Cyber Security GK Questions and Answers || GK on Cyber Security

Network Security and Firewalls Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications