Question 1

What five things do inspectors typically look for?

Accepted Answer

1. Files that are changed or newly creat

Question 2

In Windows 2000 Server, is it necessary to install Network Monitor and Network Monitor Driver separately?

Accepted Answer

A) True 
 B)False

Question 3

In Windows Server 2003, the ____________________ log records information about how software applications are performing.

Accepted Answer

The answer of In Windows Server 2003, the ____________________ log...

Question 4

Which active intrusion-detection tool monitors HTML activity and blocks attacks?

Accepted Answer

A)  Entercept 
B)  AppShield 
C)  Snort 
D)  StormWatch 
A)  Entercept 
B)  AppShield 
C)  Snort 
D)  StormWatch

Question 5

Network Monitor supports event management , which enables a server administrator to set up filters to capture a certain event or type of network activity.

Accepted Answer

A) True 
 B)False

Question 6

Host wrapper software, which may also be called a(n) ____________________, monitors network activity into or out of the computer, including protocols, packets, broadcasts, remote logon attempts, dial-in attempts, port scanning, and other activities.

Accepted Answer

The answer of Host wrapper software, which may also be...

Question 7

In Mac OS X, which log contains information about printing activities?

Accepted Answer

A)  /var/log/lookupd.log 
B)  /var/log/lpr.log 
C)  /var/log/secure.log 
D)  /var/log/system.log 
A)  /var/log/lookupd.log 
B)  /var/log/lpr.log 
C)  /var/log/secure.log 
D)  /var/log/system.log

Question 8

Which type of IDS looks for excessive use of a computer's resources, such as the CPU or memory?

Accepted Answer

A)  Passive 
B)  Network-based 
C)  Inspector 
D)  Auditor 
A)  Passive 
B)  Network-based 
C)  Inspector 
D)  Auditor

Question 9

Which file is being edited in the figure above?

Accepted Answer

A)  netinfo log 
B)  lpr.log 
C)  syslog.conf 
D)  system.log 
A)  netinfo log 
B)  lpr.log 
C)  syslog.conf 
D)  system.log

Question 10

Which type of intrusion detection system looks for intrusion signatures on ports, through frame and packet headers, and through commands?

Accepted Answer

A)  Network-based 
B)  Host-based 
C)  Auditor 
D)  Inspector 
A)  Network-based 
B)  Host-based 
C)  Auditor 
D)  Inspector

Question 11

Typically, an IDS ____________________ is software that automatically records information to a log.

Accepted Answer

The answer of Typically, an IDS ____________________ is software that...

Question 12

List eight server monitoring functions that can be viewed using the Netware MONITOR command.

Accepted Answer

Any eight of the following:
1. General s

Question 13

Does the Netware Remote Manager allow you to send messages to a particular user or to all users?

Accepted Answer

A) True 
 B)False

Question 14

In Netware 6.x, what directory contains the Audit log and the Console log?

Accepted Answer

A)  SYS:NOVONYX\SUITESPOT\ADMIN-SERV\LOGS\ 
B)  SYS:ETC\ 
C)  SYS:VAR\ 
D)  SYS:NOVONYX\SUITESPOT\LOGS\ 
A)  SYS:NOVONYX\SUITESPOT\ADMIN-SERV\LOGS\ 
B)  SYS:ETC\ 
C)  SYS:VAR\ 
D)  SYS:NOVONYX\SUITESPOT\LOGS\

Question 15

If % Network utilization is frequently over 90 percent, that means the network is experiencing collisions and there may be bottlenecks due to the network design, possibly indicating the need to create more or different subnets.

Accepted Answer

A) True 
 B)False

Question 16

In Red Hat Linux, the ____________________ Log provides information about jobs that are scheduled to run or that have already run, such as information about the number of minutes until a specific job will run.

Accepted Answer

The answer of In Red Hat Linux, the ____________________ Log...

Question 17

What five activities are typically encompassed by host-based IDS?

Accepted Answer

1. Monitoring logons
2. Monitoring files

Question 18

In Window Server 2003, does the print$ share enable you to view the number of clients currently using the server as a print server?

Accepted Answer

A) True 
 B)False

Question 19

Which active intrusion-detection tool monitors for intruders and can take action on the basis of preestablished security policies?

Accepted Answer

A)  Entercept 
B)  Symantec Intruder Alert 
C)  SecureHost 
D)  Storm Watch 
A)  Entercept 
B)  Symantec Intruder Alert 
C)  SecureHost 
D)  Storm Watch

Question 20

What are the three principle event logs in Windows 2000 Server and Windows Server 2003?

Accepted Answer

A)  System, Security, Application 
B)  System, Security, Directory Service 
C)  System, Directory Service, DNS 
D)  Security, Directory Service, Application 
A)  System, Security, Application 
B)  System, Security, Directory Service 
C)  System, Directory Service, DNS 
D)  Security, Directory Service, Application

What five things do inspectors typically look for?

In Windows 2000 Server, is it necessary to install Network Monitor and Network Monitor Driver separately?

In Windows Server 2003, the ____________________ log records information about how software applications are performing.

Which active intrusion-detection tool monitors HTML activity and blocks attacks?

Network Monitor supports event management , which enables a server administrator to set up filters to capture a certain event or type of network activity.

Host wrapper software, which may also be called a(n) ____________________, monitors network activity into or out of the computer, including protocols, packets, broadcasts, remote logon attempts, dial-in attempts, port scanning, and other activities.

In Mac OS X, which log contains information about printing activities?

Which type of IDS looks for excessive use of a computer's resources, such as the CPU or memory?

Which file is being edited in the figure above?

Which type of intrusion detection system looks for intrusion signatures on ports, through frame and packet headers, and through commands?

Typically, an IDS ____________________ is software that automatically records information to a log.

List eight server monitoring functions that can be viewed using the Netware MONITOR command.

Does the Netware Remote Manager allow you to send messages to a particular user or to all users?

In Netware 6.x, what directory contains the Audit log and the Console log?

If % Network utilization is frequently over 90 percent, that means the network is experiencing collisions and there may be bottlenecks due to the network design, possibly indicating the need to create more or different subnets.

In Red Hat Linux, the ____________________ Log provides information about jobs that are scheduled to run or that have already run, such as information about the number of minutes until a specific job will run.

What five activities are typically encompassed by host-based IDS?

In Window Server 2003, does the print$ share enable you to view the number of clients currently using the server as a print server?

Which active intrusion-detection tool monitors for intruders and can take action on the basis of preestablished security policies?

What are the three principle event logs in Windows 2000 Server and Windows Server 2003?

Operating Systems Security: Keeping Computers and Networks Secure

Viruses, Worms, and Malicious Software

Security Through Authentication and Encryption

Account-Based Security

File, Directory, and Shared Resource Security

Firewalls and Border Security

Physical and Network Topology Security

Wireless Security

Web, Remote Access, and VPN Security

E-Mail Security

Security Through Disaster Recovery

Filters

Exam 12: Security Through Monitoring and Auditing

What five things do inspectors typically look for?

In Windows 2000 Server, is it necessary to install Network Monitor and Network Monitor Driver separately?

In Windows Server 2003, the ____________________ log records information about how software applications are performing.

Which active intrusion-detection tool monitors HTML activity and blocks attacks?

Network Monitor supports event management , which enables a server administrator to set up filters to capture a certain event or type of network activity.

Host wrapper software, which may also be called a(n) ____________________, monitors network activity into or out of the computer, including protocols, packets, broadcasts, remote logon attempts, dial-in attempts, port scanning, and other activities.

In Mac OS X, which log contains information about printing activities?

Which type of IDS looks for excessive use of a computer's resources, such as the CPU or memory?

Which file is being edited in the figure above?

Which type of intrusion detection system looks for intrusion signatures on ports, through frame and packet headers, and through commands?

Typically, an IDS ____________________ is software that automatically records information to a log.

List eight server monitoring functions that can be viewed using the Netware MONITOR command.

Does the Netware Remote Manager allow you to send messages to a particular user or to all users?

In Netware 6.x, what directory contains the Audit log and the Console log?

If % Network utilization is frequently over 90 percent, that means the network is experiencing collisions and there may be bottlenecks due to the network design, possibly indicating the need to create more or different subnets.

In Red Hat Linux, the ____________________ Log provides information about jobs that are scheduled to run or that have already run, such as information about the number of minutes until a specific job will run.

What five activities are typically encompassed by host-based IDS?

In Window Server 2003, does the print$ share enable you to view the number of clients currently using the server as a print server?

Which active intrusion-detection tool monitors for intruders and can take action on the basis of preestablished security policies?

What are the three principle event logs in Windows 2000 Server and Windows Server 2003?

Operating Systems Security: Keeping Computers and Networks Secure

Viruses, Worms, and Malicious Software

Security Through Authentication and Encryption

Account-Based Security

File, Directory, and Shared Resource Security

Firewalls and Border Security

Physical and Network Topology Security

Wireless Security

Web, Remote Access, and VPN Security

E-Mail Security

Security Through Disaster Recovery

Filters