Network Configuration -Chap 4 (Firewall question set)

T/F ? Windows Firewall rules must always apply to the public profile.
False.
You can configure a firewall rule to apply in a single network profile.
You can do this by choosing Allow Program Or Feature Through Windows Firewall on the Windows Firewall Control Panel item, then clicking Change Settings, and then checking the profile in which you want a specific allowed program or feature to be enabled. You can configure the profiles in which a Windows Firewall rule applies using the netsh firewall set allowed program command with the profile option. The allowed profile settings are as follows:
■ Current Applies to all currently active network profiles
■ Domain Applies only to the domain profile
■ Standard Applies only to the private profile
■ All Applies to all profiles except the private profile
T/F ? You can enable notifications in Windows Firewall on a per-network location basis.
True.
Notifications inform the user that Windows Firewall has blocked a new program. You configure notifications for Windows Firewall by performing the following steps:
1. Open the Windows Firewall console and then click Change Notification Settings.
2. In the Customize Settings dialog box, choose whether to enable the Notify Me When Windows Firewall Blocks A New Program option for each network location.
You have a router that is configured as a firewall. The router is a layer 3 device only. Which of the following does the router use for identifying allowed or denied packets?
IP address.
You provide Internet access for a local school. You want to control Internet access based on user, and prevent access to specific URLs.
Which type of firewall should you install?
Application level.
Your company has a connection to the Internet that allows users to access the Internet. You also have a Web server and an e-mail server that you want to make available to Internet users. You want to create a DMZ for these two servers.
Which type of device should you use to create the DMZ?
Network based firewall.