Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 34 guests and 2 members online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow help with a question about firewalls
EH-Net
May 23, 2013, 03:15:55 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: help with a question about firewalls  (Read 4063 times)
0 Members and 1 Guest are viewing this topic.
queen
Newbie
*
Offline Offline

Posts: 7


View Profile
« on: October 16, 2010, 04:19:12 AM »

I am learning now for the exam ceh v6. I came across the following question:

<question>True or False?  A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It may be a hardware device or a software program running on a secure host computer. Hardware Firewall is easy to penetrate as compared to Software basic Firewall. </question>
<answer Correct="Yes">True</answer>
<answer Correct="No">False</answer>

<feedbackonincorrect>
True. A hardware firewall is a small metal box filled with plug openings, or ports. You hook your computer network into the box then set it up on your computer, Hardware firewall offer better performance than software version.

The first 2 sentences are correct. But I disagree with the third question that hardware firewall is easier to penetrate compared to software. Moreover, the reason that "Hardware firewall offer better performance than software version." doesn't have to do anything with penetration ease. So, if 2 sentences are correct and one is incorrect, than the overall answer should be false.

My questions:
1. Is it a typo mistake in the selection of the answer?
2. Do they really mean that hardware firewall is easier to penetrate?  If yes, what would be the reason.
3. Am I missing something?

Any input into this topic to shed some light will be highly appreciated.

Queen
Logged
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #1 on: October 16, 2010, 12:22:24 PM »

When anyone talks about hardware firewalls they doesn't mean that there is no software with that box . Lets take a Cisco PIX/ASA or Juniper SSG , they do have propriety softwares included with them . On the other hand software based firewalls would mean linux based firewalls or simillar products ( they can also be appliance based )  .


In my opinion the statement is wrong since hardware based firewalls does not operate on x86 arch or similar and thus are harder to penetrate . Also hardware firewalls offer better performance since they are made to work for specific purpose and not for hosting email servers or proxy servers etc , which we can do it with Linux or any other operating systems.
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
queen
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #2 on: October 16, 2010, 12:52:10 PM »

Thank you. I agree with you. 

I will be happy to see a reply from those who wrote these questions and answers and correct us if needed.
Logged
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #3 on: October 16, 2010, 09:53:47 PM »

Is this question from CEH officall stuff ? I doubt . If they are from dumps , I would like to add that never rely on dump's answers .... however you can use them for an idea how will the exam be  Grin
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
queen
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #4 on: October 17, 2010, 03:11:28 PM »

Is this question from CEH officall stuff ? I doubt . If they are from dumps , I would like to add that never rely on dump's answers .... however you can use them for an idea how will the exam be  Grin

Yes, it is from the official CEH stuff, Career Academy boot Camp. To each module with video there is review_quiz.

I found in other places some mistakes. It was a question about WEP.

see below:
<question>
                        WEP is used on 802.11 networks, what was it designed for?
                </question>
                <answer Correct="No">
                        WEP is designed to provide a wireless local area network (WLAN) with a level of security and privacy comparable to what it usually expected of a wired LAN.
                </answer>
                <answer Correct="Yes">
                        WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a lever of integrity and privacy adequate for sensible but unclassified information.
                </answer>
                <answer Correct="No">
                        WEP is designed to provide a wireless local area network (WLAN) with a level of availability and
privacy comparable to what is usually expected of a wired LAN.
                </answer>
                <answer Correct="No">
                        WEP is designed to provide a wireless local area network (WLAN) with a level of privacy comparable
 to what it usually expected of a wired LAN.
                </answer>

Their answer is option 2. In my opinion it should be option 1, but I might be wrong. Maybe in their opinion, it's 2 because of the word encryption.  Will be glad to hear your opinion.


 
Logged
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #5 on: October 17, 2010, 03:27:29 PM »

Thats the problem with written exams !! There are times when multiple answers are said to be correct but you have to choose one Tongue
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
queen
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #6 on: October 17, 2010, 05:43:09 PM »

Thats the problem with written exams !! There are times when multiple answers are said to be correct but you have to choose one Tongue

But what would be the correct answer in your opinion to that question?
Logged
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #7 on: October 17, 2010, 06:23:59 PM »

It stands for Wired Equivalent Privacy so I think first one would be the answer .
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
queen
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #8 on: October 22, 2010, 04:40:47 PM »

Thanks. ;-)

I hope that such errors won't happen at the exam.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.084 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.