ISA 62443 IC34 5 FIREWALL AND IDS EXAM QUESTIONS
AND ANSWERS WITH COMPLETE SOLUTIONS GRADED
A++
What is a Firewall?
A hardware or software solution that regulates traffic between networks or devices
based on a predefined policy. It provides protection by filtering out unauthorized
communications like hacker attempts or malware.
What are the two main categories of firewall?
Network Firewalls
Host-based Firewalls
What is a network firewall?
A device that filters traffic between multiple networks by inspecting each inbound and
outbound data packet based on configurable rules.
What is a hardware appliance that regulates traffic between networks by
inspecting each packet against a set of rules?
Network Firewall
What is a software or firmware on a host, built into the OS/firmware or an
application, that protects the individual host?
Host based firewall
, What are the three classes of firewalls?
Packet Filter
Stateful Inspection
Deep Packet Inspection (application level)
What is a packet filtering class of firewall?
This class of firewall inspects various elements within a packet, such as source and
destination addresses, network protocol, flag status, and transport layer ports. It makes
decisions based on these attributes and the direction of the packet (inbound or
outbound) without analyzing the packet's payload.
What is a stateful inspection class of firewall?
This class of firewall tracks the state of connections and blocks packets deviating from
expected states. It scrutinizes TCP header values and maintains a state table for
connection tracking. It then compares each new packet with the state table to detect
any inconsistency with the expected state.
What is a deep packet inspection class of firewall?
This class of firewall integrates basic intrusion detection technology to analyze
application layer protocols and detect malicious or malformed packets. This feature
allows it to grant or deny access based on specific attributes of the application layer
protocol or its content, such as blocking certain types of email attachments or specific
protocol functions.
What is an IACS Firewall?
Specialized firewalls to safeguard typically vulnerable components like PLCs and DCS
controllers. These firewalls feature industrial robustness, user-friendliness for
AND ANSWERS WITH COMPLETE SOLUTIONS GRADED
A++
What is a Firewall?
A hardware or software solution that regulates traffic between networks or devices
based on a predefined policy. It provides protection by filtering out unauthorized
communications like hacker attempts or malware.
What are the two main categories of firewall?
Network Firewalls
Host-based Firewalls
What is a network firewall?
A device that filters traffic between multiple networks by inspecting each inbound and
outbound data packet based on configurable rules.
What is a hardware appliance that regulates traffic between networks by
inspecting each packet against a set of rules?
Network Firewall
What is a software or firmware on a host, built into the OS/firmware or an
application, that protects the individual host?
Host based firewall
, What are the three classes of firewalls?
Packet Filter
Stateful Inspection
Deep Packet Inspection (application level)
What is a packet filtering class of firewall?
This class of firewall inspects various elements within a packet, such as source and
destination addresses, network protocol, flag status, and transport layer ports. It makes
decisions based on these attributes and the direction of the packet (inbound or
outbound) without analyzing the packet's payload.
What is a stateful inspection class of firewall?
This class of firewall tracks the state of connections and blocks packets deviating from
expected states. It scrutinizes TCP header values and maintains a state table for
connection tracking. It then compares each new packet with the state table to detect
any inconsistency with the expected state.
What is a deep packet inspection class of firewall?
This class of firewall integrates basic intrusion detection technology to analyze
application layer protocols and detect malicious or malformed packets. This feature
allows it to grant or deny access based on specific attributes of the application layer
protocol or its content, such as blocking certain types of email attachments or specific
protocol functions.
What is an IACS Firewall?
Specialized firewalls to safeguard typically vulnerable components like PLCs and DCS
controllers. These firewalls feature industrial robustness, user-friendliness for
