Sec+ Chapters 10 & 11

Standard for secure data transfer across the internet that functions at the network layer.

Which of the following is NOT a valid SSH server authentication method?

What type of firewall is distinguished by the fact they inspect IP headers?

What deconstructs outbound packets, performs analysis, then rebuilds it and forwards it on?

Protocol that handles authentication and key exchange for IPSec.

What command would you use if you wanted to print out only the firstfew lines of a file?

Application-aware FWs can't decrypt data packets without special add ons.

What port does IMAPS use?

What is something a network monitor wouldn't be concerned about?

What term refers to a DoS attack where the client requests IP addresses for many spoofed MAC addresses?

NIDS can be much more application specific than HIDS/HIPS

What authentication type might an LDAP server use if you wanted to implement Kerberos?

What virtual firewall type's filtering functionality is built into the cloud provisioning tool?

What allows a computer to establish a VPN whenever an Internet connection over a trusted network is detected?

What uses PKI for authentication and confidentiality to prevent email spoofing and account compromise?

What uses an engine loaded with a database of attack patterns or signatures?

What version of TLS is currently the latest version and is resistant to downgrade attacks?

Someone crafts a phishing link that seems legitimate, but goes to a different page than requested/stated. What happened?

How would you connect a sensor if you wanted to receive every passing frame, no matter the circumstances?

IPSs are always inline, meaning traffic must pass through them instead of being redirected to them.

What is the 1st core function of a SIEM tool?

What solution is commonly used to secure and filter user traffic?

Which of the following is a stand-alone hardware FW that performs as a FW only?

What's a way of securing FTP through SSH?

What two statements correctly describes an SNMP monitor?

What solution is focused on trying to understand, analyze, and predict intent?

What log collection process would Syslog fall into?

IPSec protocol that performs a cryptographic hash on an IPSec packet + a shared key, and adds HMAC in its header.

Choose two recommended DNS safety measures:

What is the principal protocol for the actual delivery of real time data?