본문 바로가기

Certification/[FCF] Fortinet Certified Fundamentals

[FCF] Cybersecurity 2.0 - Lession 01 : Firewalls (Quesion&Answer)

Q. Which type of firewall was the first generation of firewalls?
Select one:

- Application layer
- Stateful
Packet filter 
- Next-generation firewall (NGFW)


Q.Which three traits are characteristics of a next generation firewall (NGFW)? (Choose three.)
Select one or more:

- Inspects only unencrypted packets 
Can segment a network based on user, device, and application type 
Uses AI to enforce security policies 
Delivers high-performance inspection  
- Controls network traffic based only on network address 


Q. Which three elements does a stateful firewall track when determining whether to allow or deny a TCP/IP connection? (Choose three.)
Select one or more:

Source IP address 
- Destination port 
- Type of application connected to
- User behavior 
Protocol in use 


Q. In a UTM firewall, which component monitors protocols, such as FTP and HTTP?
Select one:

- Web filter 
Application layer filter 
- Transport layer filter 
- Protocol filter


Q. What was a limitation of first-generation firewalls?
Select one:

- Filtered only at Layer 3 of the OSI model 
- Granular policy capability made managing the firewall too complex 
- Produced many false positives, thereby overwhelming IT security 
Opened random ports and used multiple connections 


Q. Complete the sentence: A packet filter firewall controls network traffic based on ___________.
Select one:

network addresses, protocols, and ports. 
- the behavior of the network connections. 
- application behavior or characteristics.
- filtering layers 2–7 of the OSI model.


Q. Which identifying feature differentiates an NGFW firewall from earlier types of firewalls?
Select one:

- Monitors IP addresses and ports 
- Filters by protocol   
Uses rule-based decision-making 
- Examines data in the packets