Chiron Exams course practice examsIn development
Open Source Firewalls: OPNsense and pfSense
The two leading FreeBSD-based open-source firewalls covered together: interface and zone design that segments a network by trust, stateful per-interface first-match rules with a default-deny inbound stance, and NAT where a port forward deliberately opens the perimeter; then IPsec, WireGuard and OpenVPN site-to-site and remote-access VPNs, Suricata intrusion prevention, pfBlockerNG DNS filtering and proxy services layered deliberately, CARP high availability removing the firewall as a single point of failure, and the monitoring, configuration backup and updates that keep an internet-exposed edge reliable.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| The firewall platform and rules | Course module |
| VPNs, security services and operations | Course module |
Two sample questions
1. Which traffic should a DMZ interface normally be denied?
- Connections initiated into the internal network — correct
- Connections outward from the DMZ to the internet
- Replies to requests that came from the internet
- Name resolution queries sent to the firewall
Why: A DMZ exists to be reachable from outside, so the whole point is that its compromise does not open a path inward.
2. What does a traffic selector define in an IPsec tunnel?
- Which algorithms the peers use
- Which interface terminates the tunnel
- Which identity each peer presents
- Which networks the tunnel carries — correct
Why: Both ends must describe the same pair of networks in opposite order, and a mismatch is refused rather than negotiated.
The real Chiron Exams course exam
| Length | Self-paced |
|---|---|
| Questions | Chapter practice questions throughout |
| Pass mark | Not applicable; this is a course rather than a proctored exam |
| Price | Included with the Chiron Exams platform |
| Recommended before you sit it | Basic networking familiarity is helpful. |
| Valid for | Not applicable |
Exam facts as published by Chiron Exams; always check the vendor’s page before you book.
Study Chiron Exams course with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.