What is a port number in networking?

An identifier assigned to applications running on a device

Why is real-time detection of network attacks important?

To identify and respond to attacks as they occur, minimizing damage

What is a 'zero-day attack'?

An attack carried out before the software creator has fixed the flaw

If a port scan reports a port as 'closed,' what does this mean?

The port is not running any service and cannot be exploited

What does an 'open' response in a port scan indicate?

The port or service is accessible and can be exploited

How does an Intrusion Prevention System (IPS) differ from an IDS?

IPS can block or deny suspicious traffic in real time

How does Cisco’s Advanced Malware Protection (AMP) Threat Grid assist security teams?

It analyzes files for behaviors that reveal advanced persistent threats

Which of the following is a common method used to defend against zero-day attacks and APTs?

Using enterpriselevel advanced malware detection solutions like Cisco’s AMP

What is the primary purpose of Intrusion Detection Systems (IDS)?

To detect, log, and report malicious activities

studbud

Cisco

10 termsStudBud Administration

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Which tool can be used to perform an online port scan against your public IP address?
Nmap Online Port Scanner
Windows Defender
Wi-Fi Analyzer
Google Search
2
What is a port number in networking?
A security protocol for data encryption
A special IP address used only for servers
An identifier assigned to applications running on a device
A type of network hardware
3
Why is real-time detection of network attacks important?
To delay the response until after the attack
Because attacks are always visible immediately
To identify and respond to attacks as they occur, minimizing damage
To prevent attacks from happening in the first place
4
What is a 'zero-day attack'?
An attack that targets only servers with outdated software
An attack that occurs exactly on the day of a software release
An attack carried out before the software creator has fixed the flaw
An attack that exploits a known vulnerability with a patch available
5
If a port scan reports a port as 'closed,' what does this mean?
The port is currently open and accessible
The access to the port is blocked by a firewall
The port is not running any service and cannot be exploited
The port has been filtered by a network device
6
What does an 'open' response in a port scan indicate?
The port or service is blocked by a firewall
The port or service is accessible and can be exploited
The port or service is not listening on the device
The port or service cannot be accessed by other devices
7
How does an Intrusion Prevention System (IPS) differ from an IDS?
An IPS only logs traffic, while an IDS blocks it
IPS can block or deny suspicious traffic in real time
They are the same and perform the same functions
An IDS is hardware-based, while an IPS is always software-based
8
How does Cisco’s Advanced Malware Protection (AMP) Threat Grid assist security teams?
It replaces IDS and IPS systems entirely
It automatically fixes all malware infections
It analyzes files for behaviors that reveal advanced persistent threats
It blocks all network traffic from unknown sources
9
Which of the following is a common method used to defend against zero-day attacks and APTs?
Using enterpriselevel advanced malware detection solutions like Cisco’s AMP
Regularly updating all software manually
Disabling firewalls to speed up detection
Relying solely on antivirus software
10
What is the primary purpose of Intrusion Detection Systems (IDS)?
To prevent all types of cyber attacks
To replace firewalls in a network
To detect, log, and report malicious activities
To block malicious traffic in real-time

Cisco Flashcards | StudBud