Question 1

Attempts by an intruder to determine information about a system prior to the start of an intrusion attack is called:

Accepted Answer

A)  deflecting
B)  detecting
C)  foot printing
D)  infiltrationE) C) and D)
F) A) and D)

Question 2

Which intrusion-detection method measures activity levels against known short-term and\or long-term work profiles?

Accepted Answer

A)  Executable profiling
B)  Resource profiling
C)  Threshold monitoring
D)  User\group work profilingE) None of the above
F) A) and B)

Question 3

What might one see in an implementation of intrusion deterrence?

Accepted Answer

A)  Blocking of legitimate users by mistake
B)  Fake resources with legitimate-sounding names
C)  Profiling of users,resources,groups,or applications
D)  Real resources with fake namesE) B) and D)
F) B) and C)

Question 4

____________ is a method of providing free software for distribution with the code available for viewing and altering.

Accepted Answer

The answer of ____________ is a method of providing free...

Question 5

In which mode of operation does Snort display a continuous stream of packet contents to the console?

Accepted Answer

A)  Heuristic mode
B)  Network intrusion-detection mode
C)  Packet logger mode
D)  Packet sniffer modeE) None of the above
F) B) and C)

Question 6

One type of intrusion-detection and avoidance which involves identifying suspect IP addresses and preventing intrusions is called:

Accepted Answer

A)  anomaly detection
B)  intrusion deflection
C)  intrusion deterrence
D)  preemptive blockingE) All of the above
F) C) and D)

Exam 5: Intrusion-Detection Systems

Attempts by an intruder to determine information about a system prior to the start of an intrusion attack is called:

Correct Answer
verified

____________ is a method of providing free software for distribution with the code available for viewing and altering.

Correct Answer
verified

In which mode of operation does Snort display a continuous stream of packet contents to the console?

Correct Answer
verified

One type of intrusion-detection and avoidance which involves identifying suspect IP addresses and preventing intrusions is called:

Correct Answer
verified

Which intrusion-detection method measures activity levels against known short-term and\or long-term work profiles?

Correct Answer
verified

What might one see in an implementation of intrusion deterrence?

Correct Answer
verified

Exam 5: Intrusion-Detection Systems

Attempts by an intruder to determine information about a system prior to the start of an intrusion attack is called:

Correct AnswerverifiedShow Answer

____________ is a method of providing free software for distribution with the code available for viewing and altering.

Correct AnswerverifiedShow Answer

In which mode of operation does Snort display a continuous stream of packet contents to the console?

Correct AnswerverifiedShow Answer

One type of intrusion-detection and avoidance which involves identifying suspect IP addresses and preventing intrusions is called:

Correct AnswerverifiedShow Answer

Which intrusion-detection method measures activity levels against known short-term and\or long-term work profiles?

Correct AnswerverifiedShow Answer

What might one see in an implementation of intrusion deterrence?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified