Question 1

Three methods dominate IDPS detection methods: the ____________________-based approach, the statistical anomaly-based approach, and the stateful packet inspection approach.

Accepted Answer

The answer of Three methods dominate IDPS detection methods: the...

Question 2

When a collection of honeypots connects several honeypot systems on a subnet, it may be called a(n) ____________________.

Accepted Answer

The answer of When a collection of honeypots connects several...

Question 3

The ____________________ port is also known as a switched port analysis (SPAN) port or mirror port.

Accepted Answer

The answer of The ____________________ port is also known as...

Question 4

A(n) ____________________ is a honeypot that has been protected so that it cannot be easily compromised.

Accepted Answer

The answer of A(n) ____________________ is a honeypot that has...

Question 5

Under the guise of justice, some less scrupulous administrators may be tempted to ____________________, or hack into a hacker's system to find out as much as possible about the hacker.

Accepted Answer

The answer of Under the guise of justice, some less...

Question 6

A(n) ____________________-based IDPS resides on a particular computer or server and monitors activity only on that system.

Accepted Answer

The answer of A(n) ____________________-based IDPS resides on a particular...

Question 7

With a(n) ____________________ IDPS control strategy, all IDPS control functions are implemented and managed in a central location.

Accepted Answer

The answer of With a(n) ____________________ IDPS control strategy, all...

Question 8

The attack ____________________ is a series of steps or processes used by an attacker, in a logical sequence, to launch an attack against a target system or network.

Accepted Answer

The answer of The attack ____________________ is a series of...

Question 9

When the measured activity is outside the baseline parameters, it is said to exceed the ____________________ level.

Accepted Answer

The answer of When the measured activity is outside the...

Question 10

HIDPSs are also known as system ____________________ verifiers.

Accepted Answer

The answer of HIDPSs are also known as system ____________________...

Question 11

A signature-based IDPS is sometimes called a(n) ____________________-based IDPS.

Accepted Answer

The answer of A signature-based IDPS is sometimes called a(n)...

Question 12

IDPSs can help the organization protect its assets when its networks and systems are exposed to ____________________ vulnerabilities or are unable to respond to a rapidly changing threat environment.

Accepted Answer

The answer of IDPSs can help the organization protect its...

Question 13

Alarm ____________________ and compaction is a consolidation of almost identical alarms that happen at close to the same time into a single higher-level alarm.

Accepted Answer

The answer of Alarm ____________________ and compaction is a consolidation...

Question 14

____________________ is the process of attracting attention to a system by placing tantalizing bits of information in key locations.

Accepted Answer

The answer of ____________________ is the process of attracting attention...

Question 15

A(n) ____________________ IDPS can adapt its reactions in response to administrator guidance over time and circumstances of the current local environment.

Accepted Answer

The answer of A(n) ____________________ IDPS can adapt its reactions...

Question 16

In ____________________ protocol verification, the higher-order protocols are examined for unexpected packet behavior or improper use.

Accepted Answer

The answer of In ____________________ protocol verification, the higher-order protocols...

Question 17

A(n) ____________________ system contains pseudo-services that emulate well-known services, but is configured in ways that make it look vulnerable to attacks.

Accepted Answer

The answer of A(n) ____________________ system contains pseudo-services that emulate...

Question 18

The ongoing activity from alarm events that are accurate and noteworthy but not necessarily significant as potentially successful attacks is called ____________________.

Accepted Answer

The answer of The ongoing activity from alarm events that...

Question 19

____________________ is a systematic survey of all of the target organization's Internet addresses.

Accepted Answer

The answer of ____________________ is a systematic survey of all...

Question 20

A(n) ____________________ occurs when an attacker attempts to gain entry or disrupt the normal operations of an information system, almost always with the intent to do harm.

Accepted Answer

The answer of A(n) ____________________ occurs when an attacker attempts...

Quiz 7: Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools