Exam 21: Network Endpoint Security

An IDS comprises three logical components: sensors, __________ , and user interface.

An __________ is violations of security policy, usually characterized as attempts to affect the confidentiality, integrity, or availability of a computer or network.

Malicious software, commonly called __________ , is perhaps the most significant security threat to organizations.

the first step in a DDoS attack is for the attacker to infect a number of machines with zombie software that will ultimately be used to carry out the attack.

A __________ attack attempts to consume the target's resources so that it cannot provide service.

the __________ defines the transport protocol.

there are two general approaches to intrusion detection: Misuse detection and ___________ .

A circuit-level gateway permits an end-to-end tCP connection.

Packet filter gateways tend to be more secure than application- level gateways.

the firewall provides an additional layer of defense, insulating internal systems from external networks or other parts of the internal network.

A stateful packet inspection firewall reviews the same packet information as a packet filtering firewall, but also records information about tCP connections.

A __________ monitors network traffic for particular network segments or devices and analyzes network, transport, and application protocols to identify suspicious activity.

Between internal and external firewalls are one or more networked devices in a region referred to as a __________ network.

Packet filter firewalls are susceptible to security breaches caused by improper configurations.

One limitation of a firewall is that an improperly secured wireless LAN may be accessed from outside the organization.

__________ controls how particular services are used.

A(n) __________ is placed at the edge of a local or enterprise network, just inside the boundary router that connects to the Internet or some wide area network.

A __________ provides a location for monitoring security-related events.

Intrusion detection is the process of collecting information about events occurring in a computer system or network and analyzing them for signs of intrusions.

__________ control determines the types of Internet services that can be accessed, inbound or outbound.