CISS 300 Chapter 7 KEY EXAM questions and
CORRECT Answers
In a ____ attack, the attacker eavesdrops during the victim's session and uses statistical analysis of
patterns and inter-keystroke timings to discern sensitive session information. - CORRECT
ANSWERS b. timing
Alarm filtering is alarm clustering that may be based on combinations of frequency, similarity in
attack signature, similarity in attack target, or other criteria that are defined by the system
administrators. - CORRECT ANSWERS False
A(n) ____ is a network tool that collects copies of packets from the network and analyzes them. -
CORRECT ANSWERS d. packet sniffer
____ functions are mathematical algorithms that generate a message summary or digest to confirm
the identity of a specific message and to confirm that there have not been any changes to the
content. - CORRECT ANSWERS d. Hash
Biometric False reject rates are know as: - CORRECT ANSWERS a. Type I errors
____ applications use a combination of techniques to detect an intrusion and then trace it back to its
source. - CORRECT ANSWERS d. Trap and trace
Which of the following is a tool that active intrusion prevention - CORRECT ANSWERS c. LaBrea
A(n) ____ IDPS is focused on protecting network information assets. - CORRECT ANSWERS b.
network-based
____ are usually passive devices and can be deployed into existing networks with little or no
disruption to normal network operations. - CORRECT ANSWERS b. NIDPSs
AirCrack is a ____________ - CORRECT ANSWERS b. WEP/WPA cracking tool
CORRECT Answers
In a ____ attack, the attacker eavesdrops during the victim's session and uses statistical analysis of
patterns and inter-keystroke timings to discern sensitive session information. - CORRECT
ANSWERS b. timing
Alarm filtering is alarm clustering that may be based on combinations of frequency, similarity in
attack signature, similarity in attack target, or other criteria that are defined by the system
administrators. - CORRECT ANSWERS False
A(n) ____ is a network tool that collects copies of packets from the network and analyzes them. -
CORRECT ANSWERS d. packet sniffer
____ functions are mathematical algorithms that generate a message summary or digest to confirm
the identity of a specific message and to confirm that there have not been any changes to the
content. - CORRECT ANSWERS d. Hash
Biometric False reject rates are know as: - CORRECT ANSWERS a. Type I errors
____ applications use a combination of techniques to detect an intrusion and then trace it back to its
source. - CORRECT ANSWERS d. Trap and trace
Which of the following is a tool that active intrusion prevention - CORRECT ANSWERS c. LaBrea
A(n) ____ IDPS is focused on protecting network information assets. - CORRECT ANSWERS b.
network-based
____ are usually passive devices and can be deployed into existing networks with little or no
disruption to normal network operations. - CORRECT ANSWERS b. NIDPSs
AirCrack is a ____________ - CORRECT ANSWERS b. WEP/WPA cracking tool
