CyberRevision
Continue revision → ← Subjects
Complete networking bank

All 5,000 questions.

Search the curriculum, filter by level, check your saved status, or open any question in revision mode.

0 answered overall

Showing 3,801–3,850 of 5,000 matching questions

50 per page
3801
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.20:22 → 10.40.0.10:40000, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3802
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.21:80 → 10.40.1.11:40001, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3803
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.22:443 → 10.40.2.12:40002, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Allow it as valid return traffic for an established session.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3804
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.23:587 → 10.40.3.13:40003, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3805
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.24:22 → 10.40.4.14:40004, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3806
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.25:80 → 10.40.5.15:40005, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3807
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.26:443 → 10.40.6.16:40006, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always broadcast it to every internal host.
Practice →
3808
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.27:587 → 10.40.7.17:40007, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3809
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.28:22 → 10.40.8.18:40008, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Allow it as valid return traffic for an established session.
Practice →
3810
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.29:80 → 10.40.9.19:40009, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3811
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.30:443 → 10.40.10.20:40010, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3812
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.31:587 → 10.40.11.21:40011, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3813
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.32:22 → 10.40.12.22:40012, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Allow it as valid return traffic for an established session.
  4. Translate it with DNS before checking state.
Practice →
3814
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.33:80 → 10.40.13.23:40013, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3815
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.34:443 → 10.40.14.24:40014, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3816
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.35:587 → 10.40.15.25:40015, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3817
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.36:22 → 10.40.16.26:40016, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Allow it as valid return traffic for an established session.
  4. Translate it with DNS before checking state.
Practice →
3818
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.37:80 → 10.40.17.27:40017, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3819
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.38:443 → 10.40.18.28:40018, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3820
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.39:587 → 10.40.19.29:40019, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3821
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.40:22 → 10.40.20.30:40020, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3822
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.41:80 → 10.40.21.31:40021, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3823
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.42:443 → 10.40.22.32:40022, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3824
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.43:587 → 10.40.23.33:40023, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3825
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.44:22 → 10.40.24.34:40024, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Allow it as valid return traffic for an established session.
  4. Translate it with DNS before checking state.
Practice →
3826
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.45:80 → 10.40.25.35:40025, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Always broadcast it to every internal host.
Practice →
3827
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.46:443 → 10.40.26.36:40026, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3828
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.47:587 → 10.40.27.37:40027, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3829
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.48:22 → 10.40.28.38:40028, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3830
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.49:80 → 10.40.29.39:40029, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3831
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.50:443 → 10.40.30.40:40030, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3832
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.51:587 → 10.40.31.41:40031, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3833
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.52:22 → 10.40.32.42:40032, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3834
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.53:80 → 10.40.33.43:40033, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3835
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.54:443 → 10.40.34.44:40034, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3836
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.55:587 → 10.40.35.45:40035, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3837
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.56:22 → 10.40.36.46:40036, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3838
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.57:80 → 10.40.37.47:40037, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Always allow it because the destination port is above 1024.
Practice →
3839
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.58:443 → 10.40.38.48:40038, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3840
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.59:587 → 10.40.39.49:40039, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3841
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.60:22 → 10.40.40.50:40040, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3842
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.61:80 → 10.40.41.51:40041, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3843
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.62:443 → 10.40.42.52:40042, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3844
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.63:587 → 10.40.43.53:40043, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3845
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.64:22 → 10.40.44.54:40044, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3846
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.65:80 → 10.40.45.55:40045, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3847
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.66:443 → 10.40.46.56:40046, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3848
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.67:587 → 10.40.47.57:40047, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3849
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.68:22 → 10.40.48.58:40048, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3850
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.69:80 → 10.40.49.59:40049, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Always allow it because the destination port is above 1024.
Practice →