1. Which type of firewall is most likely to prevent SYN floods?

1. Packet filtering

2. Static

3. Stateful packet inspection

4. Dynamic

2. What does a 500 HTTP response indicate?

1. Client error

2. OK

3. Redirect

4. Server error

3. Why would you not turn off a router before examining it for evidence?

1. You may destroy evidence.

2. You would turn it off.

3. It will lose its routing tables when powered off.

4. It violates FBI forensic guidelines.

4. What does a router use to determine the path on which to send packets?

1. MAC address

2. IP address

3. Protocol used

4. Next available port

5. Which header would have the sender’s MAC address?

1. TCP

2. IP

3. Ethernet

4. None