Quiz: Module 09 - traffic unless explicitly allowed? a. Force Den...

Quiz: Module 09

Network Security Appliances and Technologies Which firewall rule action implicitly denies all other traffic unless explicitly allowed?

• Force Deny
• Bypass
• Allow
• Force Allow - answer Allow

Allow implicitly denies all other traffic unless explicitly allowed.Which of the following is NOT a NAC option when it detects a vulnerable endpoint?

• Give restricted access to the network. 1 / 2

• Update Active Directory to indicate the device is

vulnerable.

• Deny access to the network.
• Connect to a quarantine network. - answer

Update Active Directory to indicate the device is vulnerable.NAC does not update Active Directory.How does BPDU guard provide protection?

• All firewalls are configured to let BPDUs pass to

the external network.

• BPDUs are encrypted so that attackers cannot

see their contents.

• It sends BPDU updates to all routers.
• It detects when a BPDU is received from an

endpoint. - answer It detects when a BPDU is received from an endpoint.Which statement regarding a demilitarized zone (DMZ) is NOT true?

• It typically includes an email or web server.
• / 2