Exam 9: Internet and Network Forensics and Intrusion Detection

Match the firewall type with its description. -Proxy firewall

A(n)________ is the standard operation procedures of the network when it is running normally.

Match the firewall type with its description. -Network layer

An IDS is considered by most system administrators to be a(n)________ security system.

Software clients called ________ installed on network devices are designed to collect information from the host.

Match the NFAT components with their description. -Server

NFAT software can be configured to accept input from almost any device that generates a(n)________ file.

NFAT systems generally require large amounts of storage space,such as a(n)________ system.

Match the firewall type with its description. -Application layer

________ analysis is also known as deep packet inspection.

The ________ is a major source of forensic data in both the stand-alone and network forensic fields.

What is considered as the primary problem associated with enterprise-level IDS tools?

________ transmit and receive data via radio frequency in the open.

The generation of logs on devices such as routers,proxies,and firewalls should always be set to the ________ at which your network can operate.

Which of the following data-capture methods uses a filtering system approach?

What is considered as the first attempt to address the increasing number of attacks on networks?

Identifying situations such as regular spikes in late-night traffic is an example of

The feature of modern switches called ________ duplicates the information going into a port to the SPAN port.

A(n)________ repeats all data received on any port to the remaining ports;it is gradually being replaced by switches and SPAN systems.