首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
外语
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are inst
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are inst
admin
2013-01-29
50
问题
While hackers with motives make headlines, they represent less than 20% of all net- work security breaches. More common are instances of authorized users accidentally winding up where they should not be and inadvertently deleting or changing data. However, the Internet introduces another concern: some Internet surfers are bound to go where they have no business and, in so doing, threaten to wipe out data to which they should not have access.
Before picking a firewall, companies need to adopt security policies. A security policy states who or what is allowed to connect to whom or what. You can group all users by department or classification. The better firewall products let you drag and drop groups in a graphical user interface (GUI) environment to define network security easily.
Two methods are most often used together to establish an Internet firewall. They are application and circuit gateways, as well as packet filtering. With application and circuit gateways, all packets are addressed to a user-level application on a gate-way that relays packets between two points. With most application gateways, additional packet-filter machines are required to control and screen traffic between the gateway and the networks. A typical configuration includes two routers. With a bastion host that serves as the application gateway sitting between them.
A drawback to application and circuit gateways is that they slow network performance. This is because each packet must be copied and processed at least twice by all the communication layers. Packet-filter gateways, which act as routers between two nets, are less secure than application gateways but more efficient. They are transparent to many protocols and applications, and they require no changes in client applications, no specific application management or installation, and no extra hardware.
Using a single, unified packet-filter engine, all net traffic is processed and then for- warded or blocked from a single point of control. However, most packet filters are state- less, understand only low-level protocols, and are difficult to configure and verity. In addition, they lack audit mechanisms. Some packet filters are implemented inside routers, limiting computing power and filtering capabilities. Others are implemented as s9ftware packages that filter the packets in application-layer processes, an inefficient approach that requires multiple data copies, expensive delays and context switches and delivers lower throughput.
So what’s a network administrator to do? Some vendors are developing firewalls that overcome many of these problems and combine the advantages of application gateways and packet filtering. These efficient, protocol-independent, secure firewall engines are capable of application-level security, user authentication, unified support, and handling of all protocols, auditing and altering. They are transparent to users and to system setup, and include a GUI for simple and flexible system management and configuration.
Which of the following can be inferred from the passage concerning the networks using application and circuit gateways?
选项
A、Secure and speedy.
B、Secure but slow.
C、Insecure and slow.
D、Insecure but speedy.
答案
B
解析
解决这个问题首先要仔细阅读第四段,(A drawback to application and circuit gateways is that they slow network performance...Packet-filter gateways...are less secure than application gateways but more efficient.这几句话一个说的是应用网关的缺点是速度慢,另外在介绍信息过滤器法时说过滤法不太安全。由此可以推断应用网关的特点是速度慢但比较安全
转载请注明原文地址:https://kaotiyun.com/show/q41O777K
0
考博英语
相关试题推荐
Between1833and1837,thepublishersofa"pennypress"provedthatalow-pricedpaper,editedtointerestordinarypeople,cou
Inrecentyears,manyAmericansofbothsexesandvariousageshavebecomeinterestedinimprovingtheirbodies.Theyhavebecom
Evengeologistisfamiliarwiththeerosioncycle.Nosoonerhasanareaoflandbeenraisedabovesea-levelthanitbecomessub
Thereweretwowidelydivergentinfluencesontheearlydevelopmentofstatisticalmethods.Statisticshadamotherwhowasdedi
ThetraditionalAmericanThanksgivingDaycelebration【1】to1621.【2】thatyearaspecialleastwaspreparedinPlymouth,Massachus
Pinetrees,ofwhichthemamalmostonehundred______,arefoundthroughouttheNorthTemperateZone.
Inthesecondhalfofeachyear,manypowerfulstormsareborninthetropicalAtlanticandCaribbeanseas.Of【1】,onlyaboutha
Thefuture______ofthebaldeagleisstillanimportantAmericanecologicalconcern.
Debbieisadivorceewholiveswithherchildren.Sheworksinadoctor’sofficeandenjoysthecontactwithpeople.Herson,J
Althoughextinctionandimpacteventsarenaturalphenomena,wemustfindawaytopreventanimpactonEarthbysmallandlarge
随机试题
政府计划使国民收入增加120亿元,如果乘数为4,政府对物品与劳务的购买应增加()
女,20岁。左乳外上象限肿块2cm×2cm大小,质如硬橡皮球,肿块表面光滑,活动,其诊断可能是()
甲的监护人为()。设本题中乙、丙在一次爆炸中同时死亡,下列说法中正确的有()。
计算机内部计算采用的是()表示数据。
某企业的变动成本率为60%,资本成本率为10%,年度赊销收入为1000万元,平均收账期为30天,一年按360天计算,则该企业应收账款的机会成本是()万元。
记住回家的路周国平每到一个陌生的城市,我的习惯是随便走走,好奇心驱使我去探寻这里热闹的街巷和冷僻的角落。在这途中,难免暂时地迷路,但心中一定要有把握,自信能记起回住处的路线。否则便会感觉不踏实。我想,人生也是如此。你
(2014深圳)仔细观察数列的排列规律,然后从四个选项中选出最符合规律的一项来填补空缺项。
一个汉字的同标码需用2字节存储,其每个字节的最高二进制位的值分别为()。
ThefirstnavigationallightsintheNewWorldwereprobablylanternshungatharborentrances.Thefirstlighthousewaspu
(Thefirst)electriclamphadtwocarbonrods(fromwhich)vapor(served)toconductthecurrent(across)thegap.
最新回复
(
0
)