IST-266 TEST 3 STUDY GUIDE | 110 QUESTIONS AND
ANSWERS | 2026 UPDATE | WITH COMPLETE SOLUTIONS.
The standard TCP/IP protocol uses IP addresses which are how many bytes in
length?
a. 4
b. 8
c. 16
d. 32 Answer - a. 4
Behavior-based monitoring attempts to overcome the limitations of both
anomaly-based monitoring and signature-based monitoring by being more
adaptive and proactive instead of reactive. Answer - True
An administrator has two servers that host the same web content, but only one
server is utilized at a given time. What can be configured to make use of both
servers in a manner that is transparent to the end users?
a. Load balancing
b. DNS caching
c. Stateful packet filtering
d. DNS poisoning Answer - a. Load balancing
,A web server must be accessible to untrusted outside users. What can be done
to isolate this host and any additional hosts with similar requirements from
more secured hosts on a network?
a. Install a bastion, configure host
b. Configure a reduction point on a firewall
c. Create a DMZ, add necessary hosts.
d. Set up a choke in front of the web server Answer - c. Create a DMZ, add
necessary hosts.
A firewall that keeps a record of the state of a connection between an internal
computer and an external device is using what technology below?
a. Stateless packet filtering
b. Stateful frame filtering
c. Stateless frame filtering
d. Stateful packet filtering Answer - d. Stateful packet filtering
Select below the technology that can be used to examine content through
application-level filtering:
a. Application gateway
b. Web security gateway
c. Security proxy
, d. Firewall Answer - b. Web security gateway
What is the name for a computer or application program that intercepts user
requests from the internal secure network and then processes that request on
behalf of the user?
a. telnet server
b. VPN server
c. proxy server
d. DNS server Answer - c. proxy server
Which of the following is not a component of an IP packet that a firewall rule
can use for filtering purposes?
a. Source address
b. Intent
c. Destination port
d. Direction Answer - b. Intent
What type of monitoring compares network traffic, activities, transactions, or
behavior against a database of known attack patterns?
a. Packet
b. Signature
ANSWERS | 2026 UPDATE | WITH COMPLETE SOLUTIONS.
The standard TCP/IP protocol uses IP addresses which are how many bytes in
length?
a. 4
b. 8
c. 16
d. 32 Answer - a. 4
Behavior-based monitoring attempts to overcome the limitations of both
anomaly-based monitoring and signature-based monitoring by being more
adaptive and proactive instead of reactive. Answer - True
An administrator has two servers that host the same web content, but only one
server is utilized at a given time. What can be configured to make use of both
servers in a manner that is transparent to the end users?
a. Load balancing
b. DNS caching
c. Stateful packet filtering
d. DNS poisoning Answer - a. Load balancing
,A web server must be accessible to untrusted outside users. What can be done
to isolate this host and any additional hosts with similar requirements from
more secured hosts on a network?
a. Install a bastion, configure host
b. Configure a reduction point on a firewall
c. Create a DMZ, add necessary hosts.
d. Set up a choke in front of the web server Answer - c. Create a DMZ, add
necessary hosts.
A firewall that keeps a record of the state of a connection between an internal
computer and an external device is using what technology below?
a. Stateless packet filtering
b. Stateful frame filtering
c. Stateless frame filtering
d. Stateful packet filtering Answer - d. Stateful packet filtering
Select below the technology that can be used to examine content through
application-level filtering:
a. Application gateway
b. Web security gateway
c. Security proxy
, d. Firewall Answer - b. Web security gateway
What is the name for a computer or application program that intercepts user
requests from the internal secure network and then processes that request on
behalf of the user?
a. telnet server
b. VPN server
c. proxy server
d. DNS server Answer - c. proxy server
Which of the following is not a component of an IP packet that a firewall rule
can use for filtering purposes?
a. Source address
b. Intent
c. Destination port
d. Direction Answer - b. Intent
What type of monitoring compares network traffic, activities, transactions, or
behavior against a database of known attack patterns?
a. Packet
b. Signature
