CPO Week 2

Adjusting a HIPS signature security level to __ is equivalent to defining an exception for all.

All of the following are ways Host IPS events are used EXCEPT

Netbus, Back Orifice, and Sub Seven are examples of:

This is a standardized list of vulnerabilities maintained by MITRE:

Where would you look in DLP to see if an anomolous event has happened?

What is the default strategy option for Privileged Users?

Policy Auditor is unable to check for which vulnerability?

Which one of these things is not like the others?

Which rule type would be used to block USB drives?

Which records are deleted first in a database purge process?

Which menu option allows you to configure and view Device Control functions?

Which is NOT a severity level for HIPS signatures?

Which Policy Auditor view allows you to see information about the underlying policy?

Which of the following are appropriate user types for User Assignment Groups?

What is not monitored by File Integrity Monitoring?

Host IPS Firewall Rule Groups can be defined by network, transport, application, schedule and location options.

Stateful firewalls use a ________ to keep track of the state of network connections.

Which extension does not install a plug-in to the agent?

Which is NOT a use of HIPS events?

 Removable Storage Device Rules can enforce the action to Read Only.

What Host IPS policy category tells the client system how to react when signatures of a specific severity are triggered?

Which rules can enforce the action to "read only"?

Device Definitions are used by Device Protection Rules and are defined by the __ for the class?

Agent handlers consist of what two services?

Which is not one of the three device types?