3.4 Protecting Networks: Firewalls（保护网络：防火墙）

LO 4 · EK 13 ｜ 严格按大纲顺序学习

▶ 从第一个 EK 开始看课件（幻灯片，可翻页/全屏） 点击下方任意 EK 编号（如 3.4.A.1）也可直接进入对应课件页

学习目标 Learning Objectives

3.4.A

- [3.4.A.1](/ek/3.4.A.1) — A firewall is used to allow or deny network traffic in or out of a network. The firewall itself … - [3.4.A.2](/ek/3.4.A.2) — A stateless firewall filters traffic based on information in packet headers, such as IP addresse… - [3.4.A.3](/ek/3.4.A.3) — A stateful firewall (also known as dynamic packet filtering) tracks the state of network connect… - [3.4.A.4](/ek/3.4.A.4) — A next-generation firewall (NGFW) has both the capabilities of typical stateless and stateful fi…

3.4.B Explain how a firewall uses an access control list to allow or deny traffic entering or leaving a network.

- [3.4.B.1](/ek/3.4.B.1) — Network administrators create a set of rules, called an access control list (ACL), that a firewa… - [3.4.B.2](/ek/3.4.B.2) — ACL rules are checked in order and the first rule that matches the criteria will be executed for… - [3.4.B.3](/ek/3.4.B.3) — A typical ACL will specify the direction of traffic (inbound or outbound), the criterion to filt…

3.4.C 3.4.D Configure a firewall to manage the flow of network traffic. Identify types of network-based firewalls. Explain how a firewall uses an access control list to allow or deny traffic entering or leaving a network. Determine the effective placement of firewalls in a network.

- [3.4.C.1](/ek/3.4.C.1) — Each segment of a network should have a firewall to control the flow of data in and out of that … - [3.4.C.2](/ek/3.4.C.2) — Network segments may have different security needs based on the data and services within them. T… - [3.4.C.3](/ek/3.4.C.3) — Each point of data ingress and egress between the internal network and the public internet shoul…

3.4.D Configure a firewall to manage the flow of network traffic. AP Cybersecurity · Course Framework

- [3.4.D.1](/ek/3.4.D.1) — The requirements for a firewall will specify what type of traffic from which sources or to which… - [3.4.D.2](/ek/3.4.D.2) — Specific rules for a firewall can allow or deny inbound or outbound traffic based on source or d… - [3.4.D.3](/ek/3.4.D.3) — Rules are implemented in order, and changing the order of a set of rules can change which traffi…

---

← 返回单元 Unit 3