What is true of the Enforcement Module? (Select all that apply)
A.
Usually installed on a multihomed machine
B.
Manages logging
C.
Is installed on a host enforcement point
D.
Examines all communications according to a Enterprise Security Policy
E.
Can provide authentication and Content Security features at the application level
Explanation:
We normally use a multihomed machine to have internal, external and DMZ interfaces. It´s also
installed in a enforcement point, because it will analyze the network traffic to comply with the
enterprise security policy. Additionally, it can provide authentication through the supported
schemes (Client, Session, User) and also some content security at the application level like
stripping off Java code from HTTP connections.
Incorrect Answers:
B: Logging is maintained at the management module.