Question 1

What type of firewall inspects traffic up to Layer 7 of the OSI model, making decisions based on application-level data?

Accepted Answer

A next-generation firewall (NGFW). It performs deep packet inspection, application awareness, and can integrate intrusion prevention capabilities beyond traditional stateful inspection.

Question 2

What is the primary difference between a stateful firewall and a stateless (packet-filtering) firewall?

Accepted Answer

A stateful firewall tracks the state of active connections and makes decisions based on session context, while a stateless firewall evaluates each packet independently without considering prior traffic.

Question 3

What network device monitors traffic and generates alerts when suspicious activity is detected, but does NOT actively block threats?

Accepted Answer

An Intrusion Detection System (IDS). It is a passive monitoring tool that alerts administrators but requires human or automated intervention to respond.

Question 4

What is a jump server (jump box) used for in network security?

Accepted Answer

A jump server is a hardened, monitored host used as an intermediary access point to manage devices in a separate security zone, reducing direct exposure of sensitive systems.

Question 5

What is the function of a Web Application Firewall (WAF)?

Accepted Answer

A WAF inspects and filters HTTP/HTTPS traffic between web applications and the internet, protecting against attacks like SQL injection, XSS, and other OWASP Top 10 threats.

Network Security – CompTIA Security+ Certification

Study Modes

Practice Test

Study Guide

Try These Cards

Related Study Decks

CompTIA Security+ Certification — Complete Bundle

CompTIA Security+ Compliance & Governance

CompTIA Security+ Threats & Attacks

Cryptography Basics – CompTIA Security+

Identity & Access Management – CompTIA Security+

Incident Response – CompTIA Security+ Flashcards

Unlock the Full CompTIA Security+ Certification Study Bundle