Firewall quiz

Test your Firewall knowledge with a free interactive quiz — 28 questions with answers and explanations. No signup needed to play.

What does "TLS inspection" (decrypt-inspect-re-encrypt) on an NGFW allow the firewall to do that it otherwise could not?

1. What does "TLS inspection" (decrypt-inspect-re-encrypt) on an NGFW allow the firewall to do that it otherwise could not?
2. A security review finds that a company's production database security group has a wide-open ingress rule allowing 0.0.0.0/0 on the database port. What is the most appropriate fix?
3. A DMZ (demilitarized zone) in network architecture is best described as:
4. Why might a team explicitly use a NACL to deny traffic from a known-malicious IP range, in addition to relying on security groups?
5. What distinguishes a stateful firewall from a stateless one?
6. What specifically does a Web Application Firewall (WAF) protect against that a general network firewall typically does not?
7. Why is logging denied and allowed traffic (flow logs, firewall logs) considered a critical part of firewall operations, not an optional extra?
8. What is a practical downside of stateful firewalls compared to stateless ones?
9. A team relies entirely on their firewall to secure a web application and skips input validation, reasoning that "the firewall blocks bad traffic." Why is this reasoning flawed?
10. In a three-tier segmented architecture (load balancer, app, database), which of these rule configurations best reflects the principle of least privilege at the network layer?
11. What is the primary function of a firewall?
12. What risk do temporary "allow my IP for debugging" firewall rules create if they are not cleaned up after use?

More quizzes