CCNA Cybersecurity Firewall Rule Configuration Quiz

1. In Cisco ASA, what is the difference between 'inside' and 'outside' security zones?

Inside has higher security level; outside is less trusted

Inside and outside are identical in security level

Outside has higher security level than inside

The terms refer only to physical location, not security

2. In firewall rule configuration, what does 'established' connection mean in stateful inspection?

A connection that has completed the TCP three-way handshake

A connection that has been active for more than one hour

Any connection from the internal network

A connection using encryption protocols

3. Which firewall rule configuration element specifies the source and destination networks?

Protocol field

Port numbers

IP addresses and subnet masks

Time-based restrictions

4. What is the role of Network Address Translation (NAT) in firewall configuration?

Encrypts all traffic passing through the firewall

Translates private IP addresses to public addresses for security and address conservation

Blocks all incoming connections

Increases firewall processing speed

5. In Cisco firewall configuration, which protocol field specifies 'any protocol'?

0

255

None (must specify TCP or UDP)

Protocol 'any'

6. What is the purpose of a firewall's 'connection timeout' setting?

Closes idle connections after a specified period to free resources

Increases the speed of all network traffic

Prevents all external connections automatically

Encrypts all session data

7. Which rule configuration approach is considered a security best practice?

Permit all traffic by default, then block specific threats

Deny all traffic by default, then permit only necessary traffic

Allow traffic for 24 hours then review

Apply the same rules to all interfaces

8. In firewall rule configuration, what does 'log' action do?

Automatically blocks the traffic permanently

Records information about matched traffic for auditing and troubleshooting

Encrypts the traffic before forwarding

Redirects traffic to a backup firewall

9. What is the primary advantage of using 'object groups' in Cisco firewall configuration?

They increase firewall processing speed significantly

They simplify rule management by grouping similar objects for reuse

They automatically update rules when threats are detected

They eliminate the need for logging and monitoring

10. Which firewall rule configuration prevents IP spoofing attacks?

Denying all ICMP traffic

Validating that source IP addresses match expected networks

Enabling encryption on all ports

Blocking DNS queries

11. What is the primary function of an Access Control List (ACL) in a Cisco firewall?

Monitor network traffic and log all packets

Define which traffic is permitted or denied based on specific criteria

Encrypt all outbound network connections

Automatically update firewall firmware

12. What is network segmentation and why is it important in firewall configuration?

Dividing the network into zones with different security policies to limit lateral movement

Splitting bandwidth equally among all users

Creating separate firewall logs for each department

Assigning different IP ranges to each physical switch

13. Which command is used to apply an ACL to a Cisco interface?

Configure access-list

Ip access-group in/out

Apply firewall rule

Set interface security-level

14. In firewall rule configuration, what does a 'deny any any' rule at the end represent?

Permits all traffic by default

Implements the implicit deny principle

Allows only internal network traffic

Blocks ICMP packets only

15. What is the purpose of a firewall's 'default route' rule?

Routes traffic to the fastest available path

Catches all traffic that does not match any other rule

Prevents all inbound connections automatically

Encrypts all unclassified traffic

16. Which protocol operates at Layer 7 and requires deep packet inspection for effective filtering?

TCP

UDP

HTTP

ICMP

17. In Cisco ASA configuration, what does the 'access-list' command do?

Creates a list of authorized network administrators

Defines permit or deny rules based on source, destination, and protocol

Displays active network connections

Configures VPN encryption parameters

18. What is the correct order for processing firewall rules?

Rules are applied randomly for load balancing

Rules are processed sequentially from top to bottom; first match wins

All rules are applied simultaneously to each packet

Rules are prioritized by bandwidth consumption

19. Which firewall inspection method maintains connection state information?

Stateless inspection

Stateful inspection

Deep packet inspection

Application layer filtering

20. In firewall rule configuration, what does the term 'implicit deny' mean?

All traffic is allowed unless explicitly blocked

All traffic is denied unless explicitly permitted

Rules are applied in random order

Traffic is denied for 30 seconds then allowed