Question 1

Match the firewall type with its description.
-Proxy firewall

Accepted Answer

A) Permits FTP or HTTP protocols 
B) Acts like an IP filter 
C) Acts as a mediator

Question 2

Match between columns
                        Premises: Content
Playback
Pattern
Timeline sequencing

Accepted Answer

The Answer of Correlates events in a chronological order and is...

Question 3

A(n)________ is the standard operation procedures of the network when it is running normally.

Accepted Answer

The answer of A(n)________ is the standard operation procedures of...

Question 4

Match the firewall type with its description.
-Network layer

Accepted Answer

A) Permits FTP or HTTP protocols 
B) Acts like an IP filter 
C) Acts as a mediator

Question 5

An IDS is considered by most system administrators to be a(n)________ security system.

Accepted Answer

The answer of An IDS is considered by most system...

Question 6

Software clients called ________ installed on network devices are designed to collect information from the host.

Accepted Answer

The answer of Software clients called ________ installed on network...

Question 7

Match the NFAT components with their description.
-Server

Accepted Answer

A) Where the analysis is performed 
B) Contains a large database 
C) Modules installed on hosts

Question 8

NFAT software can be configured to accept input from almost any device that generates a(n)________ file.

Accepted Answer

The answer of NFAT software can be configured to accept...

Question 9

NFAT systems generally require large amounts of storage space,such as a(n)________ system.

Accepted Answer

The answer of NFAT systems generally require large amounts of...

Question 10

Match the firewall type with its description.
-Application layer

Accepted Answer

A) Permits FTP or HTTP protocols 
B) Acts like an IP filter 
C) Acts as a mediator

Question 11

________ analysis is also known as deep packet inspection.

Accepted Answer

The answer of ________ analysis is also known as deep...

Question 12

The ________ is a major source of forensic data in both the stand-alone and network forensic fields.

Accepted Answer

The answer of The ________ is a major source of...

Question 13

What is considered as the primary problem associated with enterprise-level IDS tools?

Accepted Answer

A) The slowing of the network 
B) The complexity of the program 
C) The amount of data collected 
D) The cost

Question 14

________ transmit and receive data via radio frequency in the open.

Accepted Answer

The answer of ________ transmit and receive data via radio...

Question 15

The generation of logs on devices such as routers,proxies,and firewalls should always be set to the ________ at which your network can operate.

Accepted Answer

The answer of The generation of logs on devices such...

Question 16

Which of the following data-capture methods uses a filtering system approach?

Accepted Answer

A) Stop,look,and listen 
B) Catch it as you can 
C) Filter as you scan 
D) Detect and filter

Question 17

What is considered as the first attempt to address the increasing number of attacks on networks?

Accepted Answer

A) MIDs 
B) GUIDs 
C) NATs 
D) IDSs

Question 18

Identifying situations such as regular spikes in late-night traffic is an example of

Accepted Answer

A) Pattern analysis 
B) Content analysis 
C) Playback analysis 
D) Timeline sequencing analysis

Question 19

The feature of modern switches called ________ duplicates the information going into a port to the SPAN port.

Accepted Answer

The answer of The feature of modern switches called ________...

Question 20

A(n)________ repeats all data received on any port to the remaining ports;it is gradually being replaced by switches and SPAN systems.

Accepted Answer

The answer of A(n)________ repeats all data received on any...

Exam 9: Internet and Network Forensics and Intrusion Detection

Match the firewall type with its description. -Proxy firewall

Match the type of analysis with its function or description.

A(n)________ is the standard operation procedures of the network when it is running normally.

Match the firewall type with its description. -Network layer

An IDS is considered by most system administrators to be a(n)________ security system.

Software clients called ________ installed on network devices are designed to collect information from the host.

Match the NFAT components with their description. -Server

NFAT software can be configured to accept input from almost any device that generates a(n)________ file.

NFAT systems generally require large amounts of storage space,such as a(n)________ system.

Match the firewall type with its description. -Application layer

________ analysis is also known as deep packet inspection.

The ________ is a major source of forensic data in both the stand-alone and network forensic fields.

What is considered as the primary problem associated with enterprise-level IDS tools?

________ transmit and receive data via radio frequency in the open.

The generation of logs on devices such as routers,proxies,and firewalls should always be set to the ________ at which your network can operate.

Which of the following data-capture methods uses a filtering system approach?

What is considered as the first attempt to address the increasing number of attacks on networks?

Identifying situations such as regular spikes in late-night traffic is an example of

The feature of modern switches called ________ duplicates the information going into a port to the SPAN port.

A(n)________ repeats all data received on any port to the remaining ports;it is gradually being replaced by switches and SPAN systems.