Principles FInal

In firewall jargon, the 'DMZ network' hosts?

Mail servers are placed in a DMZ because they?

Under a default-drop firewall policy, you must?

Which attribute is not part of the CIA-AN model?

Under the Monitored aspect of adequate tools, which task fits?

Which NIDS deployment adds latency?

Which hardening inserts a stack canary?

A DMZ segment primarily hosts?

Log rotation primarily helps to?

In cloud-security risk lists, attacks on shared CPU caches fall under?

Which is a listed firewall limitation?

The high false-positive rate of anomaly-based IDS is due to?

Applying least privilege reduces?

During OS installation, which action is recommended?

Which Linux utility rotates logs?

Which is not an essential cloud characteristic?

Stateful inspection tracks which aspect?

Statistical anomaly detection differs from signature detection because it?

CWE-79 is better known as?

Path-traversal vulnerabilities arise when?

Anomaly detection can spot zero-day attacks better than signature detection because it?

A distributed IDS aggregates data into a?

A buffer overflow that overwrites the return address is?

Unless specifically routed, VPN traffic can?

In IaaS, the customer is responsible for?

Which statement about buffer overflows in Java is accurate?

In cloud computing, 'measured service' refers to?

Which step installs a rootkit for attackers?

Which claim about redundancy is false?

Compared with a network IPS, a host-based IPS?

A low-interaction honeypot is intended to?

The primary security benefit of ASLR is that it?

Which property provides proof of origin?

What is the default stance for packet-filter firewalls?

Which IPS technique detects exploits?

Which IoT search engine finds devices?

Road-warrior deployments are a subtype of?

Removing telnet and ftp services is classed as?

No single point of failure is an attribute of?

A stack canary value is placed to?

Which trio lists IDS architecture components?

Heap-spray attacks are mitigated by?

Which adequate-tool property ensures recovery copies exist?

An IPS running inline still has which limitation?

A host-based IDS analyzes which data source?

Which OS-hardening step removes unnecessary services?

In Snort, which action drops packets?

SELinux enforces a default-deny MAC policy that is?

Ken Thompson's essay highlights the risk of?

SELinux and AppArmor are examples of?

Placing multiple firewalls implements?

Defense-in-depth for OS hardening is best defined as?

Which pair are both input-neutralisation flaws?

A NOP sled is associated with which attack?

Which historical exploit used a classic buffer overflow?