FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 7: Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 41

Multiple Choice

Review LaterAdd Note

Review Later

____ is a specially configured connection on a network device that is capable of viewing all of the traffic that moves through the entire device.

A) NIDPS
B) SPAN
C) DPS
D) IDSE

Correct Answer

verified

Show Answer

Question 42

Multiple Choice

Review LaterAdd Note

Review Later

A(n) ____ IDPS is focused on protecting network information assets.

A) network-based
B) host-based
C) application-based
D) server-based

Correct Answer

verified

Show Answer

Question 43

True/False

Review LaterAdd Note

A(n)log file monitor is similar to a NIDPS._________________________

When the measured activity is outside the baseline parameters,it is said to exceed the ____________________ level.

To secure data in transit across any network,organizations must use ____________________ to be assured of content privacy.

Most of the technologies that scan human characteristics convert these images to some form of minutiae.

List and describe the four advantages of HIDPSs.

When a collection of honeypots connects several honeypot systems on a subnet,it may be called a(n)____________________.

A signature-based IDPS is sometimes called a(n)____________________-based IDPS.

A HIDPS is optimized to detect multihost scanning,and it is able to detect the scanning of non-host network devices,such as routers or switches.

Under the guise of justice,some less scrupulous administrators may be tempted to ____________________,or hack into a hacker's system to find out as much as possible about the hacker.

____ applications use a combination of techniques to detect an intrusion and then trace it back to its source.

IDPS researchers have used padded cell and honeypot systems since the late ____.

A HIDPS can monitor systems logs for predefined events.

An alert or intrusion is an indication that a system has just been attacked or is under attack._________________________

A(n)listener vulnerability scanner is one that listens in on the network and determines vulnerable versions of both server and client software._________________________

Among all possible biometrics,____ is(are) considered truly unique.

The process by which attackers change the format and/or timing of their activities to avoid being detected by the IDPS is known as a false attack stimulus.

A(n)server-based IDPS protects the server or host's information assets._________________________

A strategy based on the concept of defense in depth is likely to include intrusion detection systems,active vulnerability scanners,passive vulnerability scanners,automated log analyzers,and protocol analyzers.