Mod 8
The _______packet filtering firewall can react to an emergent event and update or create rules to deal with that event
Dynamic
Best practices in firewall rule set configuration state that the firewall device never allows administrative access directly from the ________network
What is public
__________ make filtering decisions based on the specific host computer’s identity, as represented by its network interface card (NIC) address, and operate at the data link layer of the OSI model or the subnet layer of the TCP/IP model.
What is Media Access Control Layer
The most common credential for a CISO-level position is the _____ certification.
CISM
The _____ is the title most commonly associated with the top information security officer in the organization.
What is CISO
_________ assigns non-routing local addresses to computer systems in the local area network and uses ISP-assigned addresses on a one-to-one basis
What is Network Address Translation
In order to keep the Web server inside the internal network, direct all HTTP requests to the internal filtering firewall and configure the _____________ router/firewall to allow only that device to access the internal Web server.
What is proxy server?
Because the _____ host stands as a sole defender on the network perimeter, it is commonly referred to as the sacrificial host.
What is bastion
Security managers accomplish objectives identified by the ______and resolve issues identified by technicians.
CISO
Security managers accomplish _____ identified by the CISO and resolve issues identified by technicians
When a bastion host approach is used, the host contains two ____, forcing all traffic to go through the device.
What is NIC
__________ use security protocols and encrypt traffic transmitted across unsecured public networks like the Internet
What is secure VPNs
The dominant architecture used to secure network access today is the _____ firewall.
What is screen subnet
______departures include termination for cause, permanent downsizing, temporary lay-off, or some instances of quitting
Hostile
Security managers accomplish _____ identified by the CISO and resolve issues identified by technicians
What is CISSP
A common DMZ arrangement is a subnet firewall that consists of two or more internal bastion hosts behind a _____________ router, with each host protecting the trusted network
What is packet-filter
Lattice-based access control is a form of _____ access control in which users are assigned a matrix of authorizations for particular areas of access.
What is nondiscretionary
Configuring firewall _____ is viewed as much an art as it is a science.
What is policies
The model commonly used by large organizations places the information security department within the _____ department.
Info tech
The former System Administration, Networking, and Security Organization is now better known as _____.
SANS
When Web services are offered outside the firewall, ______traffic should be blocked from internal networks through the use of some form of proxy access or DMZ architecture
What is HTTP
_____ firewalls examine every incoming packet header and can selectively filter packets based on header information such as destination address, source address, packet type, and other key information.
Packet-filtering
Known as the ping service, _____is a common method for hacker reconnaissance and should be turned off to prevent snooping.
What is ICMP
The latest forecasts for information security-related positions expect _____ openings than in many previous years
What is MOOOORREEE
____ is a cornerstone in the protection of information assets and in the prevention of financial loss.
Separation of Duties
_____ filtering requires that the firewall's filtering rules for allowing and denying packets are manually developed and installed with the firewall.
What is dynamic
_____ inspection firewalls keep track of each network connection between internal and external systems.
What is stateful
In most common implementation models, the content filter has two components: _____.
What is rating and filtering
Many who move to business-oriented information security were formerly_____ who were often involved in national security or cybersecurity.
Military
Once a candidate has accepted a job offer, the employment _____ becomes an important security instrument.
Contract
The application layer proxy firewall is also known as a(n) _____.
What is application firewall
The proxy server is often placed in an unsecured area of the network or is placed in the _____ zone.
What is demilitarized?
Because the bastion host stands as a sole defender on the network perimeter, it is commonly referred to as a(n) _____ host.
What is sacrificial?
Many who move to business-oriented information security were formerly_____ who were often involved in national security or cybersecurity.
Builders
_____________ are contracted workers hired for a specific one-time purpose, commonly to provide expertise the organization does not have internally.