AP®︎ Cybersecurity: Topic 3.4 Flashcards

Software that applies configured rules to permit or deny network traffic crossing a network or segment boundary

A firewall that evaluates each packet independently using header information such as IP addresses, ports, and protocol, without tracking connections

A firewall that filters packet headers and tracks connection state, allowing it to distinguish expected connection traffic from unrelated traffic

A firewall combining stateless and stateful filtering with advanced features such as deep packet inspection, intrusion prevention, and application filtering

A numbered TCP or UDP network endpoint associated with a service, such as TCP port 22 for SSH; it is not a physical switch port

Inbound traffic enters the segment or zone named by a rule; outbound traffic leaves it, so direction is relative to the protected boundary

An ordered set of firewall rules specifying which inbound or outbound traffic to permit or deny based on criteria such as addresses, ports, protocols, services, or applications

ACL rules are evaluated from top to bottom, and the first matching rule is executed while all later rules are ignored for that traffic

Permit only specifically required traffic, place those narrow exceptions first, and use a broader later rule to deny the remaining traffic

Identify the boundary, direction, source, destination, protocol, port, service or application, allow-or-deny action, and position relative to broader or overlapping rules

Place firewall controls at every internet ingress and egress point and at each network-segment boundary, using policies appropriate to each segment