y controls and safeguards, so that an intruder faces multiple layers of controls.
Question 88. What Is Security Perimeter?
The point at which an organization’s security protection ends, and the outside world begins is referred to as the security perimeter.
Question 89. What Are The Key Technological Components Used For Security Implementation?
A firewall is a device that selectively discriminates against information flowing into or out of the organization
The DMZ (demilitarized zone) is a no-man’s land, between the inside and outside networks, where some organizations place Web servers
In an effort to detect unauthorized activity within the inner network, or on individual machines, an organization may wish to implement Intrusion Detection Systems or IDS.
Question 90. What Is Systems-specific Policy (syssp)?
SysSPs are frequently codified as standards and procedures used when configuring or maintaining systems..
Systems-specific policies fall into two groups:
Access control lists (ACLs) consist of the access control lists, matrices, and capability tables governing the rights and privileges of a particular user to a particular system.
Question 91. What Is The Importance Of Blueprint?
The blueprint should specify the tasks to be accomplished and the order in which they are to be realized. It should serve as a scaleable,upgradable,and comprehensive paln for the information security needs for coming years.
Question 92. What Are The Approaches Of Issp?
- Create a number of independent ISSP documents
- Create a single comprehensive ISSP document
- Create a modular ISSP document.
Question 93. What Are Firewalls?
A firewall is any device that prevents a specific type of information from moving between the untrusted network outside and the trusted network inside The firewall may be:
- a separate computer system
- a service running on an existing router or server
- a separate network containing a number of supporting devices.
Question 94. Explain Different Generations Of Firewalls ?
- First Generation – packet filtering firewalls
- Second Generation-application-level firewall or proxy server
- Third Generation- Stateful inspection firewalls
- Fourth Generation-dynamic packet filtering firewall
- Fifth Generation- kernel proxy.
Question 95. Mention The Functions Of First Generation Firewall ?
Examines every incoming packet header and selectively filters packets based on address, packet type, port request, and others factors.
Question 96. What Are The Restrictions Of First Generation Firewall?
The restrictions most commonly implemented are based on:
- IP source and destination address
- Direction (inbound or outbound)
- TCP or UDP source and destination port-requests.
Question 97. What Is The Advantage Of Second Generation Firewalls?
The primary disadvantage of application-level firewalls is that they are designed for a specific protocol and cannot easily be reconfigured to protect against attacks on protocols for which they are not designed.
Question 98. Define Stateful Inspection Firewall ?
It keeps track of each network connection established between internal and external systems using a state table which tracks the state and context of each packet in the conversation by recording which station sent what packet and when.
Question 99. What Is The Disadvantage Of Third Generation Firewalls?
The primary disadvantage is the additional processing requirements of managing and verifying packets against the state table, which can possibly expose the system to a DoS attack. These firewalls can track connectionless packet traffic such as UDP and remote procedure calls (RPC) traffic.
Question 100. What Is The Function Of Fifth Generation Firewall?
The final form of firewall is the kernel proxy, a specialized form that works under the Windows NT Executive, which is the kernel of Windows NT. It evaluates packets at multiple layers of the protocol stack, by checking security in the kernel as data is passed up and down the stack.
Question 101. How Firewalls Are Categorized By Processing Mode?
The five processing modes are:
- Packet filtering
- A