Exam 9: Computer Security Software

A stateful packet inspection firewall examines each packet,and denies or permits access based not only on the current packet,but also on data derived from previous packets in the conversation.

The category of intrusion detection systems that looks for patterns that don't match those of normal use is called anomaly detection.

A packet-filtering firewall is a(n)____________ firewall.

An on-demand virus scanner runs in the background and is constantly checking your PC.

A list of virus definitions is generally in a file with a ________ extension.

A file that stays in memory after it executes is a(n)_____________.

Heuristic scanning uses rules to determine whether a file or program behaves like a virus.

A screening firewall works in the application layer of the OSI model.

A _________ is a barrier between your network and the outside world.

Linux and Windows typically are not shipped with firewalls.

The method to attract an intruder to a subsystem setup for the purpose of observing him is called intrusion deterrence.

Mistaking a legitimate program for a virus is a ____________.

Typically,when you update virus definitions _____________.

A server with fake data used to attract an attacker is a honeypot.

A firewall ______ is a tool that can provide information after an incident has occurred.

Java and ActiveX codes should be scanned before they are _________.

A(n)___________ firewall examines the entire conversation between client and server,not just individual packets.

The virus scanning technique that means you have a separate area isolated from the operating system in which a file is run,so it won't infect the system is ________.

The virus scanning technique that uses rules to determine if a program behaves like a virus is _________ scanning.

In which firewall configuration is the firewall running on a server with at least two network interfaces?