stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
6.4 - 6.11 Testout Flashcards | StudBud
Explore
/
6.4 - 6.11 Testout
6.4 - 6.11 Testout
20 terms
·
StudBud Administration
·
1 play
#CyberSecurity
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Which of the following devices is capable of detecting and responding to security threats?
IPS
DNS server
Multi-layer switch
IDS
2
Which of the following describes a
false
positive when
using an IPS device?
Legitimate traffic being flagged as malicious
Th source address matching the destination address
The source address identifying a non-existent host
Malicious traffic masquerading as legitimate traffic
3
What actions can a typical passive Intrusion Detection System take when it detects an attack?
An alert is generated & delivered by email, console, or SNMP
The IDS logs all pertinent data about the intrusion
The IDS configuration is changed dynamically
LAN-side clients are halted and removed from the domain
4
Which of the following devices can monitor a network and detect potential security attacks?
CSU/DSU
Load balancer
IDS
Proxy
5
a honey pot is used for which purpose?
To entrap intruders
To delay intruders in order to gather auditing data
To prevent sensitive data from being accessed
To disable an intruders system
6
You want to use a tool to see packets on a network. Which tool should you use?
Wireshark
Nmap
OVAL
Nessus
7
What do host-based intrusion systems often rely upon to perform detection activities?
Remote monitoring tools
Host system auditing capabilities
External sensors
Network Traffic
8
Which of the following is a method for providing centralized authentication and authorization?
EAP
AAA
802.1x
RADIUS
9
Which of the following can make passwords useless on a router?
Using the MD5 hashing algorithm to encrypt the password
Using SSH to connect to a router remotely
Storing the router configuration file to a secure location
Not controlling physical access to the router
10
What do host based intrusion detection systems rely upon to perform their detection activities?
Host system auditing capabilities
Remote Monitoring tools
Walmart Yodeling Boy
Network Traffic
11
`
Listening to network traffic
Disconnecting a port being used by a zombie
Monitoring the audit trails on a server
Transmitting FIN or RES packets to an external host
12
What do host based intrusion detection systems rely upon to perform their detection activities?
Host system auditing capabilities
Network Traffic
Remote Monitoring tools
Walmart Yodeling Boy
13
Which of the following is a security device that performs statful inspections of packet data?
IPS
VPN
ACL
Firewall
14
Network-based intrusion detection is most suited to detect and prevent which types of attacks?
Application implementation flaws
Buffer overflow exploitation of software
Bandwidth-based denial of service
Brute force password attack
15
Network based intrusion detection is most suited to detect and prevent which type of attacks?
application implementation flaw
Brute force password attack
bandwidth based denial of services
buffer overflow exploitation of software
16
Network based intrusion detection is most suited to detect and prevent which types of attacks?
Brute force password attack
Buffer overflow exploitation of software
Bandwidth-based DoS
Application implementation flaws
17
Network based intrusion detection is most suited to detect and prevent which type of attacks?
buffer overflow exploitation of software
bandwidth based denial of services
application implementation flaw
Brute force password attack
18
Which of the following devices can monitor a network and detect potential security attack?
IDS
DNS server
Load Balancer
CSU/DSU
19
Which of the following are characteristics of TACACS+
Uses UDP
Uses 802.1x
Uses TCP
Allows three different servers
20
Which of the following are differences between RADIUS and TACAS+?
RADIUS uses TCP; TACACS+ uses UDP
RADIUS combines authentication & authorization to a function
IDC
IDK
