Certification ExamSG Firewall Fundamental Exam Ver.1Full nameEmail addressGenderSelectMaleFemaleOtherPrefer not to sayCurrent statusSelectSchool studentCollege studentWorking professionalJob seekerTeacher/TrainerOther I agree that my details and score may be stored for quiz administration.Start QuizQuestion 1 of 50NGFWMedium3 mark(s)1. Which are common NGFW capabilities?Select all correct answers.User-aware policyApplication awarenessPhysical cable repairIntrusion preventionURL filteringNATHard4 mark(s)2. An administrator changes only the destination NAT rule for a published server. External clients still fail because the security policy references the wrong destination object for that platform's processing order. What concept caused the failure?Select one answer.Pre-NAT versus post-NAT policy matchingNTP driftWi-Fi roamingMAC agingNGFWMedium2 mark(s)3. Which technology inspects traffic beyond IP addresses and ports to identify applications?Select one answer.ARP onlyDeep packet inspectionStatic routing onlyBasic repeaterIDS and IPSMedium2 mark(s)4. What is the main difference between IDS and IPS?Select one answer.IDS always encrypts trafficIPS only assigns IP addressesThere is no differenceIPS can actively block detected traffic; IDS mainly alertsTrap QuestionsHard5 mark(s)5. Which conditions can make a firewall rule appear unused even though related traffic exists?Select all correct answers.The traffic uses a different zoneAn earlier rule matches firstThe application uses a different port or protocolNAT changes the address used for matchingThe rule name is too shortFirewall TypesHard5 mark(s)6. Which statements correctly distinguish a WAF from a traditional network firewall?Select all correct answers.A WAF focuses on HTTP and HTTPS application attacksA network firewall commonly controls IPs, ports, zones, and sessionsBoth may be used togetherA WAF replaces every other security controlA WAF can understand web requests at Layer 7Ports and ProtocolsEasy1 mark(s)7. Which service normally uses TCP port 22?Select one answer.SNMPHTTPDNSSSHTrap QuestionsMedium2 mark(s)8. A broad allow-any rule appears above a specific deny rule. What is the likely result?Select one answer.The broad rule may permit traffic before the deny is evaluatedThe firewall rebootsThe deny always winsBoth rules are ignoredTroubleshootingHard4 mark(s)9. A firewall drops large packets across a VPN while small pings succeed. What is the most likely issue?Select one answer.Incorrect username onlyMissing VLAN namePath MTU or fragmentation problemDuplicate DNS MX recordVPNMedium3 mark(s)10. Which may be required for a site-to-site VPN to pass application traffic?Select all correct answers.Only a green tunnel iconFirewall policies permitting the trafficMatching encryption parametersCorrect routesCompatible protected subnetsFirewall ArchitectureEasy2 mark(s)11. Which statements about a DMZ are correct?Select all correct answers.It requires carefully controlled rulesIt automatically makes every server secureIt can reduce direct exposure of the LANIt can isolate public servers from the internal networkFirewall RulesEasy1 mark(s)12. Which firewall action silently discards a packet without notifying the sender?Select one answer.DropRedirectLogAcceptTrap QuestionsHard4 mark(s)13. Why can an any-any allow rule with logging still be dangerous?Select one answer.It protects only UDPLogging converts it into a denyAny-any rules cannot match trafficLogging does not reduce the excessive access grantedTrap QuestionsMedium2 mark(s)14. A firewall logs traffic as allowed, but the destination server is not listening on the required port. What will happen?Select one answer.The port becomes openThe firewall starts the serviceThe connection is automatically redirectedThe connection can still failRouting and FirewallsHard5 mark(s)15. Which observations may indicate asymmetric routing through a stateful firewall?Select all correct answers.Sessions work when both directions use one pathRouting changes alter session successDNS records contain aliasesSYN packets are seen on one interface but return packets are absentOut-of-state drops appear on a second firewallTrap QuestionsHard4 mark(s)16. A firewall shows repeated denied TCP SYN packets but no completed handshakes. What does this alone prove?Select one answer.That the source is definitely compromisedThat the destination service is vulnerableThat data was stolenOnly that connection attempts were observed and deniedSecurity PrinciplesEasy1 mark(s)17. Which principle gives users and systems only the access required for their tasks?Select one answer.Open accessLeast privilegeAny-any accessSecurity through obscurityLogging and MonitoringMedium3 mark(s)18. Which are benefits of firewall logging?Select all correct answers.Security monitoringIncident investigationTroubleshootingAudit evidenceGuaranteed attack preventionNGFWHard4 mark(s)19. A firewall policy permits an application by signature but blocks its initial packets before identification completes. Which feature is most relevant?Select one answer.DNS zone transferApplication identification dependency and temporary port-based classificationHard-drive encryptionCable negotiationFirewall TypesEasy1 mark(s)20. Which firewall commonly protects an individual computer?Select one answer.Load balancer onlyPatch panelCore router onlyHost-based firewallRouting and FirewallsMedium2 mark(s)21. What is asymmetric routing?Select one answer.Every packet uses the same pathForward and return traffic follow different pathsTraffic has no IP addressA firewall has two passwordsFirewall BasicsEasy1 mark(s)22. What is the primary purpose of a network firewall?Select one answer.Create user passwordsIncrease storage capacityControl network traffic according to security rulesRepair damaged cablesFirewall RulesEasy1 mark(s)23. What is an implicit deny rule?Select one answer.A hidden rule that blocks traffic not explicitly permittedA DNS recordA rule that allows every connectionA VPN passwordTrap QuestionsHard5 mark(s)24. A security team wants to reduce false confidence from 'allow' log entries. Which additional checks are appropriate?Select all correct answers.Check NAT translationAssume the firewall log proves end-to-end successConfirm the destination application is listeningReview server and application logsVerify routing and return pathRule GovernanceHard5 mark(s)25. Which controls are appropriate for reducing firewall rulebase risk?Select all correct answers.Shadowed-rule analysisExpiry dates for temporary rulesRule recertificationObject cleanupPermanent any-any access for testingHigh AvailabilityHard4 mark(s)26. A stateful firewall receives the return half of a TCP session on a different cluster member that has no synchronized session state. What may happen?Select one answer.The return traffic may be dropped as out of stateThe firewall automatically converts it to UDPThe packet becomes DNS trafficThe client receives a new IPNATMedium2 mark(s)27. What is the primary purpose of source NAT for internal users accessing the internet?Select one answer.Change the destination web serverAssign VLAN tagsEncrypt application dataTranslate internal source addressesTrap QuestionsMedium3 mark(s)28. Which can explain why traffic is denied even though an allow rule exists?Select all correct answers.A higher deny rule matches firstThe traffic enters through an unexpected zoneThe source address does not matchThe destination or service is incorrectThe monitor is turned offNATMedium3 mark(s)29. Which statements about NAT are correct?Select all correct answers.NAT automatically encrypts all trafficNAT can hide internal addressingNAT is not a substitute for a complete security policyNAT changes address informationFirewall TypesMedium2 mark(s)30. Which device or feature is designed specifically to protect web applications from attacks such as SQL injection?Select one answer.NTP serverLayer 2 hubWAFDHCP relayFirewall ArchitectureHard4 mark(s)31. Which design best limits damage if an internet-facing DMZ server is compromised?Select one answer.Disable all loggingPlace the database on the same unrestricted subnetAllow the DMZ to access the entire LANRestrict DMZ-to-internal access to only essential destinations and servicesTroubleshootingMedium2 mark(s)32. A rule allows TCP 443 to a web server, but users connect by name and receive a name-resolution error. What should be checked first?Select one answer.Firewall fan speedNAT table size onlyDNS resolutionEthernet cable colorHigh AvailabilityHard5 mark(s)33. Which can cause stateful firewall session failures in a high-availability design?Select all correct answers.Identical system clocksDifferent policies on cluster membersFailover during active sessionsUnsynchronized session tablesAsymmetric routingNATMedium2 mark(s)34. What does PAT allow?Select one answer.A switch to become a firewallDNS to replace DHCPOne host to use every VLANMany private hosts to share one public IP using different portsTLS InspectionHard5 mark(s)35. Which factors should be assessed before enabling broad TLS inspection?Select all correct answers.Legal and privacy requirementsPerformance capacityWhether users prefer dark modeCertificate deploymentApplication exceptionsFirewall RulesMedium2 mark(s)36. Why is rule order important on a first-match firewall?Select one answer.Rules are processed randomlyRule order affects cable speedOnly the final rule is evaluatedThe first matching rule determines the actionTraffic FlowEasy2 mark(s)37. Which are examples of network traffic direction?Select all correct answers.ClockwiseInboundOutboundNorth-southEast-westTLS InspectionMedium3 mark(s)38. Which are risks of TLS inspection?Select all correct answers.Performance overheadCertificate trust issuesPrivacy concernsApplication compatibility problemsIt removes the need for access controlFirewall ArchitectureEasy1 mark(s)39. Which zone is commonly used for public-facing servers that must remain separated from the internal LAN?Select one answer.Broadcast domainLoopbackDMZManagement VLAN onlyFirewall RulesEasy1 mark(s)40. Which firewall action explicitly allows matching traffic?Select one answer.PermitDenyDropRejectFirewall RulesEasy2 mark(s)41. Which are common firewall rule components?Select all correct answers.SourceDestinationService or portActionMonitor brightnessFirewall RulesMedium3 mark(s)42. Which settings are commonly required in a firewall rule permitting web traffic to a specific server?Select all correct answers.Correct destination addressRandom administrator nameCorrect source or source zoneAllow actionCorrect service or applicationStateful InspectionMedium2 mark(s)43. A user initiates an outbound HTTPS connection. A stateful firewall permits the reply without a separate inbound allow rule. Why?Select one answer.HTTPS bypasses all firewallsThe reply belongs to an established sessionTCP 443 is always trustedThe server is in a DMZFirewall TypesEasy1 mark(s)44. What does a stateful firewall track?Select one answer.Screen resolutionActive connection stateOnly cable lengthOnly usernamesTLS InspectionMedium2 mark(s)45. What is SSL/TLS inspection used for?Select one answer.Inspect otherwise encrypted traffic according to policyIncrease hard-drive spaceReplace all certificates permanentlyAssign IP addressesBest PracticesMedium3 mark(s)46. Which controls help reduce unnecessary firewall exposure?Select all correct answers.Use specific sources and destinationsReview unused rulesApply least privilegePermit only required servicesUse any-any rules by defaultTrap QuestionsHard4 mark(s)47. A VPN tunnel is established, but no traffic passes. The encryption counters remain at zero. What is the most likely area to check first?Select one answer.The administrator wallpaperRouting, selectors, and firewall policy for the protected networksPublic DNS root servers onlyThe firewall hostname lengthHost FirewallsEasy2 mark(s)48. Which systems may include a built-in host firewall?Select all correct answers.WindowsmacOSLinuxPassive Ethernet cableAndroidFirewall RulesEasy2 mark(s)49. Which can be basic firewall policy actions?Select all correct answers.DenyAllowRejectLogDefragment diskPorts and ProtocolsEasy1 mark(s)50. Which protocol and port are normally used for secure web browsing?Select one answer.TCP 443TCP 22TCP 21TCP 80PreviousNextSubmit Quiz Related Discover more from SanchitGurukul Subscribe to get the latest posts sent to your email. Type your email… Subscribe Previous article ☟Network Fundamentals – Level 5Read the guideNext article ☟SG Linux Fundamental Exam Ver.1Read the guide
