CYB FINAL EXAM COMBINED QUESTIONS AND
CORRECT ANSWERS
A passive IDPS response is a definitive action automatically initiated when certain types
of alerts are triggered. - Answers - False
An HIDPS can monitor system logs for predefined events. - Answers - true
A packet ____________________ is a software program or hardware appliance that
can intercept, copy, and interpret network traffic. - Answers - sniffer
Services using the TCP/IP protocol can run only on their commonly used port number
as specified in their original Internet standard. - Answers - False
List and describe at least four reasons to acquire and use an IDPS. - Answers -
A(n) event is an indication that a system has just been attacked or is under attack. -
Answers - False
List and describe the three advantages of NIDPSs. - Answers -
Alarm filtering may be based on combinations of frequency, similarity in attack
signature, similarity in attack target, or other criteria that are defined by the system
administrators. _________________________ - Answers - False
In DNS cache poisoning, valid packets exploit poorly configured DNS servers to inject
false information and corrupt the servers' answers to routine DNS queries from other
systems on the network. - Answers - True
Port explorers are tools used both by attackers and defenders to identify (or fingerprint)
the computers that are active on a network, as well as the ports and services active on
those computers, the functions and roles the machines are fulfilling, and other useful
information. _________________________ - Answers - False
The disadvantages of using the honeypot or padded cell approach include the fact that
the technical implications of using such devices are not well understood.
_________________________ - Answers - False
Once the OS is known, all of the vulnerabilities to which a system is susceptible can
easily be determined. - Answers - True
An IDPS can be configured to dial a phone number and produce an alphanumeric page
or other type of signal or message. - Answers - True
, Security tools that go beyond routine intrusion detection include honeypots, honeynets,
and padded cell systems. - Answers - True
List and describe the four advantages of HIDPSs. - Answers -
Administrators who are wary of using the same tools that attackers use should
remember that a tool that can help close an open or poorly configured firewall will not
help the network defender minimize the risk from attack. - Answers - False
Enticement is the action of luring an individual into committing a crime to get a
conviction. _________________________ - Answers - False
Intrusion detection and prevention systems perform monitoring and analysis of system
events and user behaviors. - Answers - True
A(n) __________ is an event that triggers an alarm when no actual attack is in
progress. - Answers - false attack stimulus
Activities that scan network locales for active systems and then identify the network
services offered by the host systems are known as __________. - Answers -
fingerprinting
HIDPSs are also known as system integrity verifiers. - Answers - True
In order to determine which IDPS best meets an organization's needs, first consider the
organizational environment in technical, physical, and political terms. - Answers - True
To secure data in transit across any network, organizations must use
____________________ to be assured of content privacy. - Answers - encryption
A(n) NIDPS functions on the host system, where encrypted traffic will have been
decrypted and is available for processing. _________________________ - Answers -
False
In the process of protocol application verification, the NIDPSs look for invalid data
packets. _________________________ - Answers - False
Intrusion __________ activities finalize the restoration of operations to a normal state
and seek to identify the source and method of the intrusion in order to ensure that the
same type of attack cannot occur again. - Answers - correction
A(n) port is the equivalent of a network channel or connection point in a data
communications system. _________________________ - Answers - True
CORRECT ANSWERS
A passive IDPS response is a definitive action automatically initiated when certain types
of alerts are triggered. - Answers - False
An HIDPS can monitor system logs for predefined events. - Answers - true
A packet ____________________ is a software program or hardware appliance that
can intercept, copy, and interpret network traffic. - Answers - sniffer
Services using the TCP/IP protocol can run only on their commonly used port number
as specified in their original Internet standard. - Answers - False
List and describe at least four reasons to acquire and use an IDPS. - Answers -
A(n) event is an indication that a system has just been attacked or is under attack. -
Answers - False
List and describe the three advantages of NIDPSs. - Answers -
Alarm filtering may be based on combinations of frequency, similarity in attack
signature, similarity in attack target, or other criteria that are defined by the system
administrators. _________________________ - Answers - False
In DNS cache poisoning, valid packets exploit poorly configured DNS servers to inject
false information and corrupt the servers' answers to routine DNS queries from other
systems on the network. - Answers - True
Port explorers are tools used both by attackers and defenders to identify (or fingerprint)
the computers that are active on a network, as well as the ports and services active on
those computers, the functions and roles the machines are fulfilling, and other useful
information. _________________________ - Answers - False
The disadvantages of using the honeypot or padded cell approach include the fact that
the technical implications of using such devices are not well understood.
_________________________ - Answers - False
Once the OS is known, all of the vulnerabilities to which a system is susceptible can
easily be determined. - Answers - True
An IDPS can be configured to dial a phone number and produce an alphanumeric page
or other type of signal or message. - Answers - True
, Security tools that go beyond routine intrusion detection include honeypots, honeynets,
and padded cell systems. - Answers - True
List and describe the four advantages of HIDPSs. - Answers -
Administrators who are wary of using the same tools that attackers use should
remember that a tool that can help close an open or poorly configured firewall will not
help the network defender minimize the risk from attack. - Answers - False
Enticement is the action of luring an individual into committing a crime to get a
conviction. _________________________ - Answers - False
Intrusion detection and prevention systems perform monitoring and analysis of system
events and user behaviors. - Answers - True
A(n) __________ is an event that triggers an alarm when no actual attack is in
progress. - Answers - false attack stimulus
Activities that scan network locales for active systems and then identify the network
services offered by the host systems are known as __________. - Answers -
fingerprinting
HIDPSs are also known as system integrity verifiers. - Answers - True
In order to determine which IDPS best meets an organization's needs, first consider the
organizational environment in technical, physical, and political terms. - Answers - True
To secure data in transit across any network, organizations must use
____________________ to be assured of content privacy. - Answers - encryption
A(n) NIDPS functions on the host system, where encrypted traffic will have been
decrypted and is available for processing. _________________________ - Answers -
False
In the process of protocol application verification, the NIDPSs look for invalid data
packets. _________________________ - Answers - False
Intrusion __________ activities finalize the restoration of operations to a normal state
and seek to identify the source and method of the intrusion in order to ensure that the
same type of attack cannot occur again. - Answers - correction
A(n) port is the equivalent of a network channel or connection point in a data
communications system. _________________________ - Answers - True
