CISSP Official Practice Tests by Mike Chapple, David Seidl

Chapter 4 ■ Communication and Network Security (Domain 4) 83

Chris is designing layered network security for his organization. Using the following dia-

gram, answer questions 13 through 15.

Internet

A

Firewall

Router

Switch

VPN

Concentrator

Web Server

B

C

13. What type of firewall design is shown in the diagram?

A. A single-tier firewall

B. A two-tier firewall

C. A three-tier firewall

D. A four-tier firewall

14. If the VPN grants remote users the same access to network and system resources as local
    workstations have, what security issue should Chris raise?
    A. VPN users will not be able to access the web server.
    B. There is no additional security issue; the VPN concentrator’s logical network location
    matches the logical network location of the workstations.
    C. Web server traffic is not subjected to stateful inspection.
    D. VPN users should only connect from managed PCs.