Question 1

The system administrator can be alerted by a(n)____________ to attempts to breach a system.

Accepted Answer

IDS

Question 2

Banishment vigilance is another name for:

Accepted Answer

A) anomaly detection 
B) intrusion deflection 
C) intrusion deterrence 
D) preemptive blocking 
A) anomaly detection 
B) intrusion deflection 
C) intrusion deterrence 
D) preemptive blocking D

Question 3

Implementation of intrusion deflection as a strategy requires the use of:

Accepted Answer

A) blocking software 
B) fake targets 
C) innocuous names for sensitive targets 
D) warnings to intruders to leave 
A) blocking software 
B) fake targets 
C) innocuous names for sensitive targets 
D) warnings to intruders to leave B

Question 4

Which is NOT one of the basic premises under which a honey pot functions?

Accepted Answer

A) Any traffic to the honey pot is suspicious 
B) Intruders will tend to go for easy targets with valuable data 
C) Only legitimate users have a reason to connect to it 
D) Security must allow attackers inside 
A) Any traffic to the honey pot is suspicious 
B) Intruders will tend to go for easy targets with valuable data 
C) Only legitimate users have a reason to connect to it 
D) Security must allow attackers inside

Question 5

Which method of intrusion-detection develops historic usage levels to measure activity against?

Accepted Answer

A) Application profiling 
B) Infiltration profiling 
C) Resource profiling 
D) Threshold monitoring 
A) Application profiling 
B) Infiltration profiling 
C) Resource profiling 
D) Threshold monitoring

Question 6

Machines set up as apparent targets used to allow attackers access into a network so they can be monitored are called ____________.

Accepted Answer

The answer of Machines set up as apparent targets used...

Question 7

In ____________ the system uses software and a variety of techniques to identify behaviors that appear inappropriate and compare them with acceptable behaviors.

Accepted Answer

The answer of In ____________ the system uses software and...

Question 8

Symantec's Decoy Server is a software IDS solution known as a(n)____________.

Accepted Answer

The answer of Symantec's Decoy Server is a software IDS...

Question 9

One of the most well-known free software-based intrusion-detection systems available to monitor incoming traffic is ____________.

Accepted Answer

The answer of One of the most well-known free software-based...

Question 10

Which intrusion detection strategy monitors and compares activity against preset acceptable levels?

Accepted Answer

A) Application monitoring 
B) Infiltration monitoring 
C) Resource profiling 
D) Threshold monitoring 
A) Application monitoring 
B) Infiltration monitoring 
C) Resource profiling 
D) Threshold monitoring

Question 11

An intrusion-detection system detecting a series of ICMP packets sent to each port from the same IP address might indicate:

Accepted Answer

A) a Distributed Denial of Service attack in progress 
B) scanning of the system for vulnerabilities prior to an attack 
C) the system has been infiltrated by an outsider 
D) Trojan horse\virus infection sending information back home 
A) a Distributed Denial of Service attack in progress 
B) scanning of the system for vulnerabilities prior to an attack 
C) the system has been infiltrated by an outsider 
D) Trojan horse\virus infection sending information back home

Question 12

Following rules and learning from experience as part of the process to identify and notify an administrator about an intrusion are typical when Snort is operating in which mode?

Accepted Answer

A) Command mode 
B) Network intrusion-detection mode 
C) Packet logger mode 
D) Sniffer mode 
A) Command mode 
B) Network intrusion-detection mode 
C) Packet logger mode 
D) Sniffer mode

Question 13

Which is NOT a function of an intrusion-detection system?

Accepted Answer

A) Inspect all inbound and outbound port activity 
B) Look for patterns in port activity 
C) Infiltrate the illicit system to acquire information 
D) Notify the system administrator of suspicious activity 
A) Inspect all inbound and outbound port activity 
B) Look for patterns in port activity 
C) Infiltrate the illicit system to acquire information 
D) Notify the system administrator of suspicious activity

Question 14

Which type of intrusion-detection relies on people rather than software or hardware?

Accepted Answer

A) Anomaly detection 
B) Banishment vigilance 
C) Infiltration 
D) Intrusion deterrence 
A) Anomaly detection 
B) Banishment vigilance 
C) Infiltration 
D) Intrusion deterrence

Question 15

Symantec Decoy Server does all of the following EXCEPT:

Accepted Answer

A) record all traffic related to an intrusion attack 
B) simulate incoming mail server functions 
C) simulate outgoing mail server functions 
D) track attacking packets to their source 
A) record all traffic related to an intrusion attack 
B) simulate incoming mail server functions 
C) simulate outgoing mail server functions 
D) track attacking packets to their source

Question 16

An intrusion-detection method that measures and monitors how programs use system resources is called:

Accepted Answer

A) executable profiling. 
B) resource profiling. 
C) threshold monitoring. 
D) user\group profiling. 
A) executable profiling. 
B) resource profiling. 
C) threshold monitoring. 
D) user\group profiling.

Question 17

____________ is the process an intruder uses to gain as much information as possible about a target system in the early stages of attack preparation.

Accepted Answer

The answer of ____________ is the process an intruder uses...

Question 18

Which strategy is used in the implementation of intrusion deterrence?

Accepted Answer

A) Infiltrating online hacker groups 
B) Installing honey pots to pose as important systems 
C) Monitoring connection attempts to identify IP addresses of attackers 
D) Using fake names to camouflage important systems 
A) Infiltrating online hacker groups 
B) Installing honey pots to pose as important systems 
C) Monitoring connection attempts to identify IP addresses of attackers 
D) Using fake names to camouflage important systems

Question 19

Doing one's own detective work such as trying to gather information about potential threats from illicit sources like hacker groups is known as ____________.

Accepted Answer

The answer of Doing one's own detective work such as...

Question 20

Banishment vigilance is another name for ____________.

Accepted Answer

The answer of Banishment vigilance is another name for ____________....

The system administrator can be alerted by a(n)____________ to attempts to breach a system.

Banishment vigilance is another name for:

Implementation of intrusion deflection as a strategy requires the use of:

Which is NOT one of the basic premises under which a honey pot functions?

Which method of intrusion-detection develops historic usage levels to measure activity against?

Machines set up as apparent targets used to allow attackers access into a network so they can be monitored are called ____________.

In ____________ the system uses software and a variety of techniques to identify behaviors that appear inappropriate and compare them with acceptable behaviors.

Symantec's Decoy Server is a software IDS solution known as a(n)____________.

One of the most well-known free software-based intrusion-detection systems available to monitor incoming traffic is ____________.

Which intrusion detection strategy monitors and compares activity against preset acceptable levels?

An intrusion-detection system detecting a series of ICMP packets sent to each port from the same IP address might indicate:

Following rules and learning from experience as part of the process to identify and notify an administrator about an intrusion are typical when Snort is operating in which mode?

Which is NOT a function of an intrusion-detection system?

Which type of intrusion-detection relies on people rather than software or hardware?

Symantec Decoy Server does all of the following EXCEPT:

An intrusion-detection method that measures and monitors how programs use system resources is called:

____________ is the process an intruder uses to gain as much information as possible about a target system in the early stages of attack preparation.

Which strategy is used in the implementation of intrusion deterrence?

Doing one's own detective work such as trying to gather information about potential threats from illicit sources like hacker groups is known as ____________.

Banishment vigilance is another name for ____________.

Introduction to Network Security

Types of Attacks

Fundamentals of Firewalls

Firewall Practical Applications

Encryption

Virtual Private Networks

Operating System Hardening

Defending Against Virus Attacks

Defending Against Trojan Horses,spyware,and Adware

Security Policies

Assessing a System

Security Standards

Choosing Defense Strategies

Filters

Exam 5: Intrusion-Detection Systems

The system administrator can be alerted by a(n)____________ to attempts to breach a system.

Banishment vigilance is another name for:

Implementation of intrusion deflection as a strategy requires the use of:

Which is NOT one of the basic premises under which a honey pot functions?

Which method of intrusion-detection develops historic usage levels to measure activity against?

Machines set up as apparent targets used to allow attackers access into a network so they can be monitored are called ____________.

In ____________ the system uses software and a variety of techniques to identify behaviors that appear inappropriate and compare them with acceptable behaviors.

Symantec's Decoy Server is a software IDS solution known as a(n)____________.

One of the most well-known free software-based intrusion-detection systems available to monitor incoming traffic is ____________.

Which intrusion detection strategy monitors and compares activity against preset acceptable levels?

An intrusion-detection system detecting a series of ICMP packets sent to each port from the same IP address might indicate:

Following rules and learning from experience as part of the process to identify and notify an administrator about an intrusion are typical when Snort is operating in which mode?

Which is NOT a function of an intrusion-detection system?

Which type of intrusion-detection relies on people rather than software or hardware?

Symantec Decoy Server does all of the following EXCEPT:

An intrusion-detection method that measures and monitors how programs use system resources is called:

____________ is the process an intruder uses to gain as much information as possible about a target system in the early stages of attack preparation.

Which strategy is used in the implementation of intrusion deterrence?

Doing one's own detective work such as trying to gather information about potential threats from illicit sources like hacker groups is known as ____________.

Banishment vigilance is another name for ____________.

Introduction to Network Security

Types of Attacks

Fundamentals of Firewalls

Firewall Practical Applications

Encryption

Virtual Private Networks

Operating System Hardening

Defending Against Virus Attacks

Defending Against Trojan Horses,spyware,and Adware

Security Policies

Assessing a System

Security Standards

Choosing Defense Strategies

Filters