Network+ Firewall Types and Deployment Models

1. What is the purpose of network segmentation using internal firewalls?

Eliminate perimeter protection

Limit lateral movement and contain breaches

Reduce bandwidth usage

Increase network speed

2. Which firewall deployment model uses multiple firewalls in sequence to create layered defense?

Single-tier firewall

Multi-tier or defense-in-depth firewall architecture

Stateless firewall

Host-only firewall

3. A Web Application Firewall (WAF) operates at which OSI layer to protect web applications?

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

Layer 2 (Data Link)

4. What is the primary function of a firewall's access control list (ACL)?

Encrypt network traffic

Define rules for allowing or denying traffic

Monitor firewall performance

Backup firewall configurations

5. Which firewall deployment model is most suitable for protecting individual workstations in a distributed workforce?

Perimeter firewall only

Host-based firewall

DMZ firewall

Proxy firewall

6. In a zero-trust firewall model, what fundamental principle is applied?

Trust all internal traffic implicitly

Verify every access request regardless of source

Allow traffic between trusted networks

Disable firewall rules for efficiency

7. A reverse proxy firewall primarily protects which type of server?

Internal file servers

Web servers and public-facing applications

DNS servers

DHCP servers

8. What security benefit does a DMZ provide in a three-tier firewall architecture?

Eliminates the need for access controls

Isolates public services while protecting internal assets

Prevents all external access

Removes encryption requirements

9. Which firewall type inspects packet headers only and makes decisions without tracking connections?

Stateful firewall

Application firewall

Stateless packet filter

Proxy firewall

10. A stateful firewall examines connection state by tracking which information?

Source and destination MAC addresses

Packet payload content

Connection establishment, data transfer, and termination

Physical port numbers only

11. Which firewall type maintains awareness of the state of network connections and makes decisions based on connection context?

Stateless firewall

Stateful firewall

Packet filter

Application layer firewall

12. In a cloud firewall deployment, what primary advantage does it offer over on-premises firewalls?

Lower initial cost

Scalability and protection for cloud resources

No need for encryption

Simpler configuration

13. A host-based firewall protects individual systems by operating at which level?

Network perimeter

Operating system kernel

Router interface

Gateway level

14. Which deployment model places a firewall at the network perimeter to protect the entire internal network?

Host-based firewall

Perimeter firewall

Internal segmentation

Cloud-native firewall

15. What does a firewall rule's 'implicit deny' principle mean?

All traffic is allowed unless explicitly blocked

All traffic is denied unless explicitly allowed

Deny rules take precedence over allow rules

Traffic is randomly allowed or denied

16. A firewall operating at Layer 7 of the OSI model is classified as which type?

Network layer firewall

Transport layer firewall

Application layer firewall

Data link layer firewall

17. Which firewall deployment model uses a proxy server to intercept and inspect traffic before forwarding?

Stateless deployment

Proxy firewall deployment

Pass-through deployment

Hardware-only deployment

18. In a DMZ deployment model, what is the primary security purpose?

Block all inbound traffic

Isolate public-facing servers from internal networks

Encrypt all network traffic

Eliminate the need for firewalls

19. A next-generation firewall (NGFW) differs from traditional firewalls primarily by including which capability?

Packet filtering only

Deep packet inspection and application-level awareness

Hardware acceleration only

VPN termination exclusively

20. What is the primary advantage of a stateless firewall over a stateful firewall?

Better security against DDoS attacks

Lower processing overhead and faster performance

Ability to inspect application data

Context-aware connection tracking

Network+ Firewall Types and Deployment Models Quiz