2.2 Windows Firewall

Question 1

What is Windows Defender Firewall?

Answer 1

A built-in Windows security feature that monitors and controls incoming and outgoing network traffic.

It helps protect the system from unauthorized access and network-based attacks.

Question 2

Where can you access Windows Defender Firewall settings?

Answer 2

In the Windows Security app under “Firewall & network protection.”

This is the central location for managing firewall settings.

Question 3

What are the three firewall network profiles in Windows?

Answer 3

• Domain
• Private
• Public

Each profile has different security settings based on the network type.

Question 4

What is the Domain profile used for?

Answer 4

Networks connected to a domain, typically in enterprise environments.

This profile allows for more relaxed security settings in trusted corporate networks.

Question 5

What is the Private profile used for?

Answer 5

Trusted networks such as home or small office networks.

This profile provides a balance between security and usability.

Question 6

What is the Public profile used for?

Answer 6

Untrusted networks like public Wi-Fi, with stricter security settings.

This profile is designed to protect against potential threats in less secure environments.

Question 7

Can the firewall be enabled or disabled per network profile?

Answer 7

Yes, each profile can be configured independently.

This allows for tailored security based on the network environment.

Question 8

What permission is required to change firewall settings?

Answer 8

Administrator privileges.

This ensures that only authorized users can modify security settings.

Question 9

What is the risk of disabling the firewall?

Answer 9

It exposes the system to potential unauthorized access and network-based attacks.

Disabling the firewall can significantly increase vulnerability.

Question 10

What does the “block all incoming connections” setting do?

Answer 10

It blocks all inbound traffic, even from allowed applications, enhancing security on untrusted networks.

This setting is crucial for protecting sensitive data in public environments.

Question 11

When is it useful to block all incoming connections?

Answer 11

When connected to public or unsecured networks.

This setting helps prevent unauthorized access during high-risk situations.

Question 12

What are firewall notifications?

Answer 12

Alerts that notify the user when an application is blocked by the firewall.

These notifications help users understand and manage application access.

Question 13

Can firewall notifications be customized?

Answer 13

Yes, they can be enabled or disabled per network profile.

Customization allows users to tailor alerts based on their preferences.

Question 14

What is the purpose of the Security providers section in firewall settings?

Answer 14

To identify whether Microsoft Defender Firewall or a third-party firewall is managing protection.

This helps users understand which security solution is active.

Question 15

Why is it important to know which firewall provider is active?

Answer 15

To ensure proper configuration and avoid conflicts between multiple security solutions.

Conflicts can lead to vulnerabilities and ineffective protection.