Test your Firewall knowledge with a free interactive quiz — 28 questions with answers and explanations. No signup needed to play.
Question 1/12Score 0
What is a key limitation of a basic packet-filtering firewall operating at layers 3/4?
In this round
What is a key limitation of a basic packet-filtering firewall operating at layers 3/4?
A team migrates from cloud security groups (stateful) to a legacy stateless firewall appliance and outbound HTTPS requests suddenly stop getting responses. What is the most likely cause?
A DMZ (demilitarized zone) in network architecture is best described as:
What risk do temporary "allow my IP for debugging" firewall rules create if they are not cleaned up after use?
Why does a stateless packet filter typically require two separate rules to allow a single outbound TCP connection to succeed?
A firewall uses first-match-wins rule evaluation. A broad "allow all HTTP traffic" rule is placed above a more specific "deny HTTP from region X" rule. What happens?
Why is leaving egress traffic completely unrestricted (default-allow-all outbound) a security risk, even if ingress is tightly locked down?
What is a "flat network" in the context of firewall/segmentation practice, and why is it considered a security weakness?
What is the difference between an ingress rule and an egress rule on a firewall or security group?
What specifically does a Web Application Firewall (WAF) protect against that a general network firewall typically does not?
What is the primary function of a firewall?
Why is logging denied and allowed traffic (flow logs, firewall logs) considered a critical part of firewall operations, not an optional extra?