首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
外语
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are inst
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are inst
admin
2013-01-29
42
问题
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are instances of authorized users accidentally winding up where they should not be and inadvertently deleting or changing data. However, the Internet introduces another concern: some Internet surfers are bound to go where they have no business and, in so doing, threaten to wipe out data to which they should not have access.
Before picking a firewall, companies need to adopt security policies. A security policy states who or what is allowed to connect to whom or what. You can group all users by department or classification. The better firewall products let you drag and drop groups in a graphical user interface (GUI) environment to define network security easily.
Two methods are most often used together to establish an Internet firewall. They are application and circuit gateways, as well as packet filtering. With application and circuit gateways, all packets are addressed to a user-level application on a gate-way that relays packets between two points. With most application gateways, additional packet-filter machines are required to control and screen traffic between the gateway and the networks. A typical configuration includes two routers. With a bastion host that serves as the application gateway sitting between them.
A drawback to application and circuit gateways is that they slow network performance. This is because each packet must be copied and processed at least twice by all the communication layers. Packet-filter gateways, which act as routers between two nets, are less secure than application gateways but more efficient. They are transparent to many protocols and applications, and they require no changes in client applications, no specific application management or installation, and no extra hardware.
Using a single, unified packet-filter engine, all net traffic is processed and then for- warded or blocked from a single point of control. However, most packet filters are state- less, understand only low-level protocols, and are difficult to configure and verity. In addition, they lack audit mechanisms. Some packet filters are implemented inside routers, limiting computing power and filtering capabilities. Others are implemented as s9ftware packages that filter the packets in application-layer processes, an inefficient approach that requires multiple data copies, expensive delays and context switches and delivers lower throughput.
So what’s a network administrator to do? Some vendors are developing firewalls that overcome many of these problems and combine the advantages of application gateways and packet filtering. These efficient, protocol-independent, secure firewall engines are capable of application-level security, user authentication, unified support, and handling of all protocols, auditing and altering. They are transparent to users and to system setup, and include a GUI for simple and flexible system management and configuration.
In choosing a firewall product, what is implied as the main concern of the author?
选项
A、Management.
B、Transparency.
C、Independence.
D、Efficiency.
答案
D
解析
作者在描述两种网络工具时多次谈到“效率”问题,而其他问题却没有多次出现。另外,从日常生活常识也可以知道,作为工具最重要的特点是方便易用,因此防火墙最关键的问题是提高效率。
转载请注明原文地址:https://kaotiyun.com/show/l41O777K
0
考博英语
相关试题推荐
Between1833and1837,thepublishersofa"pennypress"provedthatalow-pricedpaper,editedtointerestordinarypeople,cou
Humanbeingsareanimals.Webreathe,eatanddigest,andreproducethesamelife【21】commontoallanimals.Inabiologicallabo
Humanbeingsareanimals.Webreathe,eatanddigest,andreproducethesamelife【21】commontoallanimals.Inabiologicallabo
ThetraditionalAmericanThanksgivingDaycelebration【1】to1621.【2】thatyearaspecialleastwaspreparedinPlymouth,Massachus
ThetraditionalAmericanThanksgivingDaycelebration【1】to1621.【2】thatyearaspecialleastwaspreparedinPlymouth,Massachus
Inthesecondhalfofeachyear,manypowerfulstormsareborninthetropicalAtlanticandCaribbeanseas.Of【1】,onlyaboutha
Theriseofmultinationalcorporations(跨国公司),globalmarketing,newcommunicationstechnologies,andshrinkingculturaldiffere
ThehistoryofAfrican—Americansduringthepast400yearsistraditionallynarrated【41】anongoingstraggleagainst【42】andindif
Hehasn’tanalyzedwhyhetipssogenerously,butIthinktheproclivitystemsfromhishighschoolyears,whenheworkedasab
JanHendrikSchon’ssuccessseemedtoogoodtobetrue,anditwas.InonlyfouryearsasaphysicistatBellLaboratories,Scho
随机试题
复方抗菌制剂中为酶抑制荆的成分是
婴幼儿腹泻错误的治法是()
承压水头的定义是()。
安全生产事故隐患是指生产经营单位违反安全生产法律、法规、规章、标准、规程和安全生产管理制度的规定,或者因其他因素在生产经营活动中存在可能导致事故发生的物的危险状态、人的不安全行为和管理上的缺陷。根据相关规定,按照事故整改的难易程度,安全生产事故隐患可以分为
A国是亚洲经济发展最快的国家。A国的B省在过去30年间大力发展各类制造及加工业务,成为A国南方沿海经济第一大省。随着B省经济的快速发展,省内几个主要城市均建造了民用机场。近几年,A国政府开始大力推动铁路网络建设,目标是覆盖全国各主要省市。B省亦开始建设通往
在一个北美人和一个阿拉伯人面对面的友好交往中,阿拉伯人步步紧逼,而北美人却连连后退,这种现象说明()。
2015年10月,联合国教科文组织决定将中国申报的《南京大屠杀档案》列入《世界记忆名录》。这对我国的意义在于()。①能将“南京大屠杀”的历史从中国记忆上升为世界记忆②有利于铭记历史,弘扬以爱国主义为核心的民族精神③体现文化
妊娠期龈炎患者的龈下菌斑中的优势菌为()。
Cellscannotremainaliveoutsidecertainlimitsoftemperatureandmuchnarrowerlimitsmarktheboundariesofeffectivefunc
A、Itoffersabetterchancetohigh-levelstudents.B、Itdivideschildrenofffordifferentschools.C、Itselectsstudentsfort
最新回复
(
0
)