CyberRevision
Continue revision → ← Subjects
Complete networking bank

All 5,000 questions.

Search the curriculum, filter by level, check your saved status, or open any question in revision mode.

0 answered overall

Showing 3,851–3,900 of 5,000 matching questions

50 per page
3851
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.70:443 → 10.40.0.60:40050, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Allow it as valid return traffic for an established session.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3852
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.71:587 → 10.40.1.61:40051, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Translate it with DNS before checking state.
Practice →
3853
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.72:22 → 10.40.2.62:40052, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Allow it as valid return traffic for an established session.
Practice →
3854
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.73:80 → 10.40.3.63:40053, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3855
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.74:443 → 10.40.4.64:40054, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always broadcast it to every internal host.
Practice →
3856
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.75:587 → 10.40.5.65:40055, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3857
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.76:22 → 10.40.6.66:40056, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Allow it as valid return traffic for an established session.
Practice →
3858
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.77:80 → 10.40.7.67:40057, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3859
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.78:443 → 10.40.8.68:40058, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3860
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.79:587 → 10.40.9.69:40059, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3861
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.80:22 → 10.40.10.70:40060, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Allow it as valid return traffic for an established session.
Practice →
3862
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.81:80 → 10.40.11.71:40061, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3863
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.82:443 → 10.40.12.72:40062, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always broadcast it to every internal host.
Practice →
3864
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.83:587 → 10.40.13.73:40063, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Translate it with DNS before checking state.
Practice →
3865
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.84:22 → 10.40.14.74:40064, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3866
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.85:80 → 10.40.15.75:40065, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3867
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.86:443 → 10.40.16.76:40066, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Allow it as valid return traffic for an established session.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3868
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.87:587 → 10.40.17.77:40067, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Translate it with DNS before checking state.
Practice →
3869
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.88:22 → 10.40.18.78:40068, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Allow it as valid return traffic for an established session.
Practice →
3870
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.89:80 → 10.40.19.79:40069, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3871
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.90:443 → 10.40.20.80:40070, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3872
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.91:587 → 10.40.21.81:40071, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3873
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.92:22 → 10.40.22.82:40072, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3874
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.93:80 → 10.40.23.83:40073, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Always broadcast it to every internal host.
Practice →
3875
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.94:443 → 10.40.24.84:40074, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3876
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.95:587 → 10.40.25.85:40075, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3877
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.96:22 → 10.40.26.86:40076, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Allow it as valid return traffic for an established session.
  4. Translate it with DNS before checking state.
Practice →
3878
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.97:80 → 10.40.27.87:40077, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3879
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.98:443 → 10.40.28.88:40078, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always allow it because the destination port is above 1024.
Practice →
3880
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.99:587 → 10.40.29.89:40079, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Translate it with DNS before checking state.
  3. Always allow it because the destination port is above 1024.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3881
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.100:22 → 10.40.30.90:40080, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3882
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.101:80 → 10.40.31.91:40081, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  3. Translate it with DNS before checking state.
  4. Always broadcast it to every internal host.
Practice →
3883
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.102:443 → 10.40.32.92:40082, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3884
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.103:587 → 10.40.33.93:40083, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3885
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.104:22 → 10.40.34.94:40084, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3886
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.105:80 → 10.40.35.95:40085, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Always broadcast it to every internal host.
Practice →
3887
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.106:443 → 10.40.36.96:40086, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3888
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.107:587 → 10.40.37.97:40087, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
Practice →
3889
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.108:22 → 10.40.38.98:40088, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Allow it as valid return traffic for an established session.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →
3890
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.109:80 → 10.40.39.99:40089, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Always allow it because the destination port is above 1024.
Practice →
3891
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an authorized home-lab assessment observes 198.51.100.110:443 → 10.40.40.100:40090, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3892
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a university red-team exercise observes 198.51.100.111:587 → 10.40.41.101:40091, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Always broadcast it to every internal host.
  2. Always allow it because the destination port is above 1024.
  3. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  4. Translate it with DNS before checking state.
Practice →
3893
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a hospital SOC investigation observes 198.51.100.112:22 → 10.40.42.102:40092, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Allow it as valid return traffic for an established session.
Practice →
3894
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an e-commerce incident response case observes 198.51.100.113:80 → 10.40.43.103:40093, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3895
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a financial-services penetration test observes 198.51.100.114:443 → 10.40.44.104:40094, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Translate it with DNS before checking state.
  2. Allow it as valid return traffic for an established session.
  3. Always allow it because the destination port is above 1024.
  4. Always broadcast it to every internal host.
Practice →
3896
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a cloud migration threat model observes 198.51.100.115:587 → 10.40.45.105:40095, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Always allow it because the destination port is above 1024.
  4. Translate it with DNS before checking state.
Practice →
3897
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in an industrial network security review observes 198.51.100.116:22 → 10.40.46.106:40096, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Always broadcast it to every internal host.
  4. Allow it as valid return traffic for an established session.
Practice →
3898
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a managed-service-provider audit observes 198.51.100.117:80 → 10.40.47.107:40097, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always broadcast it to every internal host.
  3. Translate it with DNS before checking state.
  4. Always allow it because the destination port is above 1024.
Practice →
3899
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a government zero-trust rollout observes 198.51.100.118:443 → 10.40.48.108:40098, carrying ACK with sequence state matching an existing session. What should state tracking do?

View answer choices
  1. Always allow it because the destination port is above 1024.
  2. Translate it with DNS before checking state.
  3. Allow it as valid return traffic for an established session.
  4. Always broadcast it to every internal host.
Practice →
3900
Level 4 · Advanced Firewall Security Unanswered

A stateful firewall in a multinational enterprise breach simulation observes 198.51.100.119:587 → 10.40.49.109:40099, carrying unsolicited SYN with no existing state. What should state tracking do?

View answer choices
  1. Evaluate it as a new inbound connection and deny it unless policy explicitly permits it.
  2. Always allow it because the destination port is above 1024.
  3. Always broadcast it to every internal host.
  4. Translate it with DNS before checking state.
Practice →