Exam 7: Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools

Alarm ____________________ and compaction is a consolidation of almost identical alarms that happen at close to the same time into a single higher-level alarm.

(Short Answer)

4.9/5

(36)

Question 81

__________ is the process of classifying IDPS alerts so that they can be more effectively managed.

(Multiple Choice)

4.9/5

(38)

Question 82

Once the OS is known, all of the vulnerabilities to which a system is susceptible can easily be determined.

(True/False)

4.9/5

(44)

Question 83

Services using the TCP/IP protocol can run only on their commonly used port number as specified in their original Internet standard.

(True/False)

5.0/5

(38)

Question 84

Alarm filtering may be based on combinations of frequency, similarity in attack signature, similarity in attack target, or other criteria that are defined by the system administrators. _________________________

(True/False)

4.7/5

(36)

Question 85

Security tools that go beyond routine intrusion detection include honeypots, honeynets, and padded cell systems.

(True/False)

4.8/5

(37)

Question 86

Intrusion detection and prevention systems can deal effectively with switched networks.

(True/False)

4.9/5

(37)

Question 87

HIDPSs are also known as system integrity verifiers.

(True/False)

4.9/5

(40)

Question 88

In ____________________ protocol verification, the higher-order protocols are examined for unexpected packet behavior or improper use.

(Short Answer)

4.8/5

(36)

Question 89

Which of the following is NOT a described IDPS control strategy

(Multiple Choice)

4.7/5

(38)

Question 90

A(n) event is an indication that a system has just been attacked or is under attack. _________________________

(True/False)

4.9/5

(41)

Question 91

List and describe the four advantages of HIDPSs.

(Essay)

4.7/5

(33)

Question 92

Three methods dominate IDPS detection methods: the ____________________-based approach, the statistical anomaly-based approach, and the stateful packet inspection approach.

(Short Answer)

4.9/5

(40)

Question 93

A(n) server-based IDPS protects the server or host's information assets. _________________________

(True/False)

4.9/5

(42)

Question 94

In the process of protocol application verification, the NIDPSs look for invalid data packets. _________________________

(True/False)

4.8/5

(35)

Question 95

Which of the following ports is commonly used for the HTTP protocol

(Multiple Choice)

4.8/5

(27)

Question 96

A __________ vulnerability scanner listens in on the network and identifies vulnerable versions of both server and client software.

(Multiple Choice)

4.8/5

(39)

Question 97

A(n) log file monitor is similar to an NIDPS. _________________________

(True/False)

4.8/5

(41)

Question 98

A(n) __________ is an event that triggers an alarm when no actual attack is in progress.

(Multiple Choice)

4.7/5

(39)

Question 99

The activities that gather public information about the organization and its network activities and assets is called fingerprinting. _________________________

(True/False)

4.7/5

(37)

Question 100

Showing 81 - 100 of 107

Alarm ____________________ and compaction is a consolidation of almost identical alarms that happen at close to the same time into a single higher-level alarm.

__________ is the process of classifying IDPS alerts so that they can be more effectively managed.

Once the OS is known, all of the vulnerabilities to which a system is susceptible can easily be determined.

Services using the TCP/IP protocol can run only on their commonly used port number as specified in their original Internet standard.

Alarm filtering may be based on combinations of frequency, similarity in attack signature, similarity in attack target, or other criteria that are defined by the system administrators. _________________________

Security tools that go beyond routine intrusion detection include honeypots, honeynets, and padded cell systems.

Intrusion detection and prevention systems can deal effectively with switched networks.

HIDPSs are also known as system integrity verifiers.

In ____________________ protocol verification, the higher-order protocols are examined for unexpected packet behavior or improper use.

Which of the following is NOT a described IDPS control strategy

A(n) event is an indication that a system has just been attacked or is under attack. _________________________

List and describe the four advantages of HIDPSs.

Three methods dominate IDPS detection methods: the ____________________-based approach, the statistical anomaly-based approach, and the stateful packet inspection approach.

A(n) server-based IDPS protects the server or host's information assets. _________________________

In the process of protocol application verification, the NIDPSs look for invalid data packets. _________________________

Which of the following ports is commonly used for the HTTP protocol

A __________ vulnerability scanner listens in on the network and identifies vulnerable versions of both server and client software.

A(n) log file monitor is similar to an NIDPS. _________________________

A(n) __________ is an event that triggers an alarm when no actual attack is in progress.

The activities that gather public information about the organization and its network activities and assets is called fingerprinting. _________________________

Introduction to Information Security

The Need for Security

Legal, Ethical, and Professional Issues in Information Security

Planning for Security

Risk Management

Security Technology: Access Controls, Firewalls, and VPNS

Cryptography

Physical Security

Implementing Information Security

Security and Personnel

Information Security Maintenance

Filters