Windows Server® 2012 R2 CTS 2328 Ch.19 Quiz
Unlock all answers in this set
Unlock answersquestion
Firewall rules function in two ways: admit all traffic, except that which conforms to the applied rules, and secondly, block all traffic, except that which conforms to the applied rules. How does the Windows Firewall work for inbound traffic and for outbound traffic?
answer
Inbound—block all. Outbound—permit all
question
What does a firewall protect your company against?
answer
Network intrusion attempts, such as a denial of service attack
question
Windows Firewall uses three profiles to represent the type of network to which the server is connected. What are the three profiles?
answer
Domain, private, and public
question
For the Windows Firewall private profile, what type of network is expected?
answer
An internal network that is not accessible by unauthorized users
question
What does the term "filter" refer to in the Windows Firewall With Advanced Security console?
answer
The ability to display inbound or outbound rules according to a profile
question
If a user attempts to use an Internet-based e-mail account, how will Windows Firewall respond?
answer
The firewall does not block client-initiated network traffic by default.
question
What tool offers more flexibility in creating rules compared with the Windows Firewall interface under Control Panel?
answer
Windows Firewall With Advanced Security snap-in for the Microsoft Management console
question
In the Windows Firewall With Advanced Security console, while creating a new rule, the Program page specifies whether the ______.
answer
rule applies to all programs, to one specific program, or to a specific service
question
By exporting the Windows Firewall policy, you have a file with a .wfw extension that contains _____.
answer
all its rules, including the preconfigured rules and the ones you have created or modified
question
If an administrator wants to enable the "Block all incoming connections, including those in the list of allowed apps" setting, to which of the firewall profiles does it apply?
answer
Public, private, and domain
question
Windows Firewall allows an administrator to import and export firewall rules. What are the rules' file extension?
answer
.wfw
question
What is the typical incoming port number for a web server?
answer
80
question
You can configure the Windows Firewall to allow or block specific _________.
answer
ports, protocols, applications, users, and IP address ranges
question
What GPO node presents the interface with which to configure Windows Firewall properties?
answer
Computer ConfigurationPoliciesWindows SettingsSecurity SettingsWindows Firewall with Advanced Security
question
What is the primary objective of a firewall?
answer
To permit traffic in and out for legitimate users, and to block the rest
question
In Windows Firewall Customized Settings, there are three profiles (public, private, and domain). What differentiates these profiles from each other?
answer
Public is for servers accessible to temporary users. Private is for servers on an internal network. Domain is for servers in which users are all authenticated.
question
When creating a firewall exception, what is the difference between opening a port and allowing an application through?
answer
Allowing an application opens the specified port only while the program is running, and thus is less risky.
question
Windows Firewall allows you to create inbound, outbound, and connection security rules for individual servers or systems. How can you do this for multiple systems?
answer
You can create a new Group Policy Object and you can import settings from a policy file created earlier. Then deploy the GPO to other systems on the network.
question
What parameter in the Windows Firewall New Inbound Rule Wizard specifies the IP address range of local and remote systems to which the rule applies?
answer
Scope
question
What parameter in the Windows Firewall New Inbound Rule Wizard specifies the exact type of traffic at the network or transport layer, which the firewall can block or allow?
answer
Protocol and Ports
question
What parameter in the Windows Firewall New Inbound Rule Wizard specifies what the firewall should do when a packet matches the rule?
answer
Action
question
What parameter in the Windows Firewall New Inbound Rule Wizard specifies whether the rule applies to all programs, to one specific program, or to a specific service?
answer
Program
question
Which of the three Windows Firewall profiles is most appropriate for a library kiosk?
answer
Public
question
Which of the three Windows Firewall profiles is most appropriate for a company file and print server?
answer
Private
question
Which of the three Windows Firewall profiles is most appropriate for a company domain controller?
answer
Domain
question
A firewall is essentially a series of _____ that examine the contents of packets and the traffic patterns to and from the network to determine which packets they should allow to pass through.
answer
filters
question
Which of the following is the filter criterion most commonly used in firewall rules?
answer
port numbers
question
Connection security rules require that network traffic allowed through the firewall use which of the following security mechanisms?
answer
IPsec
question
Which of the following actions can you not perform from the Windows Firewall control panel?
answer
Allow an application through the firewall in all three profiles.
question
Which of the following tools cannot enable and disable the Network Discovery firewall rules?
answer
Network and Sharing Cente
question
Which of the following statements about Windows Firewall are true? (Choose all that apply.)
answer
Importing firewall rules saved from another computer overwrites all of the rules on the target system. , Applying firewall rules with Group Policy combines the newly deployed rules with the ones already there.
question
Windows Firewall uses three profiles to represent the type of network to which the server is connected. What are the three profiles?
answer
Domain, Private, and Public
question
When a user attempts to visit an Internet-based e-mail account, what is the response of the Windows Firewall?
answer
Firewall by default will not block client-initiated network traffic.
question
In the Windows Firewall With Advanced Security console, while creating a new rule, the Program page specifies whether the ______.
answer
rule applies to all programs, to one specific program, or to a specific service
question
By exporting the Windows Firewall policy, you have a file with a .wfw extension that contains _____.
answer
all its rules, including the preconfigured rules and the ones you have created or modified
question
Order the steps to import Windows Firewall rules.
answer
__1__ Log on to a server running Windows Server 2012, using an account with domain administrator privileges. __2__ In the Server Manager console, select Windows Firewall With Advanced Security from the Tools menu. The Windows Firewall with Advanced Security console appears. __3__ From the Action menu, select Import Policy. A message box appears warning that importing a policy file will overwrite all existing firewall rules. Click Yes. __4__ Locate and select the policy file you want to import and click Open. __5__ A message box appears, stating that the policy was successfully imported.
question
Order the steps to allow an application in Windows Firewall.
answer
__1__ Log on to a server running Windows Server 2012, using an account with domain administrator privileges. __2__ In the Server Manager console, open the Control Panel and click System and Security > Windows Firewall. The Windows Firewall window appears. __3__ Click Allow an app or feature through Windows Firewall. The Allowed Apps dialog box appears. __4__ Scroll down in the Allowed apps and features list and select the check box for the application you want to allow through the firewall. __5__ Click OK to close the Allowed Apps dialog box.
question
Order the steps to export Windows Firewall rules.
answer
__1__ Log on to a server running Windows Server 2012, using an account with domain administrator privileges. __2__ In the Server Manager console, select Windows Firewall With Advanced Security from the Tools menu. The Windows Firewall with Advanced Security console appears. __3__ Modify the inbound or outbound firewall rules or create new rules as needed. __4__ In the left pane, select the Windows Firewall with Advanced Security on Local Computer node. __5__ From the Action menu, select Export Policy. The Save As combo box appears. __6__ In the File Name text box, type a name for the policy file and click Save.
