Ethical › Module 12 › Lesson 5
Quiz — Firewalls and Detection
10 APPLY questions on defense devices without evasion steps.
Opening
Firewalls and detection — Module Quiz
Ten APPLY items on the sentences this module refused to collapse: a firewall is allow/deny policy plus stateful inspection you BUILD on a box you own, not a wall you punch; default deny inbound beats a busy deny list; needless 0.0.0.0/0 SSH is leftover internet; IDS watches and alerts, IPS may interrupt; signatures are known shapes, anomalies are unusual clues; tuning beats “turn it off”; a honeypot is a defender tripwire you might isolate on a net you own — you will not attack someone else’s honey. Cyberlium’s artifacts are $HOME/cyberlium-lab notes (firewall-policy, ids-ips, honeypot, firewall-lab) chmod 600. nmap decoys/fragments/timing to hide, firewall punch recipes, café/campus edges, disabling YOUR host firewall so a scan looks open, Shodan-of-random-honey, and “the catalog said evading” as a warrant are all failing answers even when they look “more CEH.” This path is original Cyberlium teaching mapped to the CEH v13 IDS/firewall/honeypot domain — not official EC-Council training, not a certification, not exam dumps. Wrong answers still teach. Empty ethics lines fail. Next after this quiz is What a Web Server Exposes: Module 13 audits a stack YOU run (default pages, listing, banners) — still no random hosts, still no directory brute of strangers.
Knowledge Check
APPLY: A teammate pastes nmap decoys and fragments and wants to “evade the campus firewall for CEH Module 12.” What is a firewall here, and what do you do?
Multiple choice
Knowledge Check
APPLY: True or False: Default-allow plus a deny list of “known bad ports,” with SSH published to 0.0.0.0/0 so Discord can grade you, matches this module.
True or False
Knowledge Check
APPLY: Which sentence correctly names stateful inspection without turning it into a bypass recipe?
Multiple choice
Knowledge Check
APPLY: A classmate says the SOC dashboard is noisy so the ethical move is to power off IPS and nmap-time the leftover IDS until it is quiet. What is the defender reading?
Multiple choice
Knowledge Check
APPLY: Select statements that match how Cyberlium teaches IDS/IPS. (Select 2)
Select all that apply
Knowledge Check
APPLY: A unused-looking SSH banner on campus “might be a honeypot.” What is a honeypot here, and what do you do?
Multiple choice
Knowledge Check
APPLY: True or False: If a managed PC forbids firewall edits, the ethical lab is to punch the café gateway instead of writing a labeled hypothetical VM you own.
True or False
Knowledge Check
APPLY: You finished the Lesson 4 lab. Which completion matches ethics and hygiene?
Multiple choice
Knowledge Check
APPLY: A blog titled with a cert acronym publishes “evading IDS” as decoys plus fragments plus honey raids. What does Cyberlium Module 12 tell you?
Multiple choice
Knowledge Check
APPLY: You carry Module 12 into Module 13. Which pairing is true, and what opens after this quiz?
Multiple choice
Knowledge Check
APPLY: curl of http://192.168.0.1/ shows a home router login (TP-Link / Netgear / Huawei / "Router Admin"). Is that DEMO in scope as a hacking target?
Multiple choice
Answer all 11 knowledge checks to continue. (0/11 answered)