Exam 7: Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools

When the measured activity is outside the baseline parameters,it is said to exceed the ____________________ level.

Among all possible biometrics,____ is(are)considered truly unique.

A HIDPS can monitor systems logs for predefined events.

A strategy based on the concept of defense in depth is likely to include intrusion detection systems,active vulnerability scanners,passive vulnerability scanners,automated log analyzers,and protocol analyzers.

When a collection of honeypots connects several honeypot systems on a subnet,it may be called a(n)____________________.

A(n)server-based IDPS protects the server or host's information assets._________________________

IDPS researchers have used padded cell and honeypot systems since the late ____.

____ is a specially configured connection on a network device that is capable of viewing all of the traffic that moves through the entire device.

To secure data in transit across any network,organizations must use ____________________ to be assured of content privacy.

A(n)listener vulnerability scanner is one that listens in on the network and determines vulnerable versions of both server and client software._________________________

The process by which attackers change the format and/or timing of their activities to avoid being detected by the IDPS is known as a false attack stimulus.

____ applications use a combination of techniques to detect an intrusion and then trace it back to its source.

A(n)____ IDPS is focused on protecting network information assets.

Under the guise of justice,some less scrupulous administrators may be tempted to ____________________,or hack into a hacker's system to find out as much as possible about the hacker.

A HIDPS is optimized to detect multihost scanning,and it is able to detect the scanning of non-host network devices,such as routers or switches.

Most of the technologies that scan human characteristics convert these images to some form of minutiae.

A(n)log file monitor is similar to a NIDPS._________________________

A signature-based IDPS is sometimes called a(n)____________________-based IDPS.

List and describe the four advantages of HIDPSs.

An alert or intrusion is an indication that a system has just been attacked or is under attack._________________________