Chapter 7 Assessment Answers 1.) B.) is the following firewall rule that prevents internal users from accessing public FTP sites. 2.) A.) is a Default-Deny rule. 3.) The Default-Deny rule appears last in the rule set. 4.) C.) is the Mechanism that allows a firewall to hand off authentication to a dedicated service host on a different system. 5.) E.) All events should be included in the file log. 6.) Stopping intrusions is not an activity used in firewall logging. 7.) An internal user accessing a public web site is not in a firewall log warrant investigation by an administrator. 8.) Centralized logging is a highly recommended method or technique for keeping firewall logs secure and uncorrupted. 9.) Packets from an unassigned internal address is an event found in a firewall log file that is a symptom of a rogue host operating within the private network. 10.) False negatives is the biggest issue or problem with an IDS. 11.) Using first match apply rule systems is not a limitation of a firewall. 12.) Wirespeed is when a firewall is able to process packets, filter malicious code, transit authorized communications onward to their destination without introducing latency or lag. 13.) Native antivirus scanning is not related to improving or maintaining the performance of a firewall. 14.) Transport mode is a form of encryption allows a firewall to filter based on the original source and destination address. 15.) The Web can be improved using caching on a firewall. 16.) Denial of service due to traffic from external sources cannot be fixed or corrected with the application of an update or patch. 17.) C.) is the primary factor used to distinguish a great firewall enhancement from a marketing gimmick used to drive up sales. 18.) Unified threat management is the name of a single device that is based on a firewall but that has been expanded and improved to perform a wide variety of services. 19.) Access is encrypted is the most important configuration element related to a firewall’s management interface. 20.) Private network NIC interface is not one of the avenues of accessing a firewall’s management interface should be limited, restricted, or disable.