cyber security 13
NIDS is an advanced version of NIPS.
(true or false?)
False
The security administrator for a large organization receives numerous alerts
from a network-based intrusion detection system
(NIDS) of a possible worm infection spreading through the network via network shares. Before taking any drastic action to solve this problem such as blocking file sharing, what should first be done?
Call an emergency change management meeting to ensure the solution will not have unforeseen negative affects.
For what purpose should the network traffic log be analyzed?
To check for suspicious traffic
Penetration testers have a number of methods to meet their testing requirements. In which of the testing techniques shown does the tester have the most knowledge of network layout and source code on specialized applications?
White box
When discussing the behavior of vulnerability assessments which choice will exploit a weakness?
Penetration test
You want to test your current security configuration. Which method would you use to avoid detection?
Passive reconnaissance
You are reviewing different penetration techniques to determine which best simulates an actual attack. Which techniques would you choose?
Black box
You are formulating a vulnerability assessment to be performed by security analysts. Nmap is one of the tools to be used. What information will you expect the program provide about the target host(s)?
• Devices
• Topology
• Services
• All of these.
Gibson Research recommends that first time users perform which two scan types first?
File Sharing
Common Ports
Which method of port scanning is the most popular?
TCP SYN scanning
Examine the choices listed. Which choice
Is NOT a valid port state?
Half-open
When using TCP/IP, most communication involves exchanging information between
running on one system and
the same program running on a remote system. TCP/IP uses a 16 bit numeric value called a
to
identify the resources to be used for the exchange. Complete the statement using the choices provided?
Process
Port Number