GIAC Exam GSNA Topic 3 Question 46 Discussion

Actual exam question for GIAC's GSNA exam

Question #: 46
Topic #: 3

[All GSNA Questions]

Zorp is a proxy firewall suite developed by Balabit IT Security. Which of the following statements are true about Zorp?

Each correct answer represents a complete solution. Choose all that apply.

AIt allows the administrators to fine-tune proxy decisions.

BZorp aims for compliance with the Common Criteria/Application Level Firewall Protection Profile
for Medium Robustness.

CIt allows full analysis of embedded protocols.

DThe GPL version of Zorp lacks much of the usability and functions from the other versions.

Show Suggested Answer

Suggested Answer: A, D

The above configuration fragment will disable the following services from the router:

The BootP service

The DNS function

The Network Time Protocol

The Simple Network Management Protocol

Hyper Text Transfer Protocol

by Candida at May 11, 2024, 10:05 AM

Limited Time Offer

25%

Off

Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Loreta

3 months ago

As a Zorp enthusiast, I can confirm that A, B, and C are all true. The GPL version may be missing a few bells and whistles, but it's still a powerful tool. Plus, it comes with a complimentary bag of glitter for those who like a little pizzazz in their network security.

upvoted 0 times

Bambi

2 months ago

Yes, but even with those limitations, the GPL version is still useful for many users.

upvoted 0 times

...

Arthur

3 months ago

I didn't know that the GPL version of Zorp lacks some functions.

upvoted 0 times

...

Alyce

3 months ago

I agree, A, B, and C are definitely true about Zorp.

upvoted 0 times

...

Leandro

4 months ago

A, B, and C are the way to go. Zorp is like the Swiss Army knife of proxy firewalls - it can do just about anything you need. Although, I heard the GPL version comes with a free unicorn sidekick. Worth it for that alone!

upvoted 0 times

Annice

2 months ago

That unicorn sidekick sounds tempting! I'll have to check out the GPL version.

upvoted 0 times

...

Pamella

3 months ago

C) It allows full analysis of embedded protocols.

upvoted 0 times

...

Gretchen

3 months ago

B) Zorp aims for compliance with the Common Criteria/Application Level Firewall Protection Profile for Medium Robustness.

upvoted 0 times

...

Fannie

3 months ago

A) It allows the administrators to fine-tune proxy decisions.

upvoted 0 times

...

Freeman

4 months ago

Hmm, D sounds a bit like a marketing ploy to get people to buy the commercial version. I'd stick with A, B, and C - the core functionality of Zorp seems solid based on those options.

upvoted 0 times

...

Malcolm

4 months ago

I remember using Zorp in one of my previous jobs. It was a lifesaver when it came to securing our network and ensuring compliance. Definitely go with A, B, and C on this one.

upvoted 0 times

...

Carlota

4 months ago

A, B, and C are all correct! Zorp is a powerful proxy firewall that offers fine-grained control, protocol analysis, and compliance with security standards. The GPL version may lack some features, but it's still a great open-source option.

upvoted 0 times