iSACA Cybersecurity Fundamentals Certification Practice Exam

Which firewall method utilizes both a packet-filtering router and a bastion host?

1. Application firewall systems

2. Screened host firewall

3. Stateful inspection firewall

4. Dual-homed firewall

The correct answer is: Screened host firewall

The method that utilizes both a packet-filtering router and a bastion host is known as a screened host firewall. This approach leverages the strengths of both components to enhance security. In a screened host firewall configuration, the packet-filtering router serves as the first line of defense against incoming traffic, blocking or allowing packets based on pre-defined rules. This initial filtering helps to prevent unauthorized access and reduces potential attacks before traffic reaches the bastion host. The bastion host, which is a hardened server, acts as an additional layer of security and can manage more complex tasks such as proxy services, secure tunneling, and monitoring traffic for malicious activity. This dual approach not only streamlines traffic management but also increases resilience against attacks, as any potential breaches at the router level can be further scrutinized and managed by the bastion host. By combining these two security mechanisms, the screened host firewall significantly strengthens the overall security posture of the network, ensuring a more sophisticated layer of defense compared to methods that rely solely on one or the other.