Informational Assurance Security Final
UPDATED Exam Questions and CORRECT
Answers
Host-based IDs (HIDS) - CORRECT ANSWER An intrusion detection system that examines
activity on an individual system
Network-based IDs (NIDS) - CORRECT ANSWER An intrusion detection system that
examines network activity that crosses it's path
Anomaly detection model - CORRECT ANSWER IDS model that builds a profile of normal
activity and detects variances
Misuse detection model - CORRECT ANSWER IDS model that relies on predefined
signatures to identify malicious activity and responds with programmed reactions
IDS Operation Categories - CORRECT ANSWER Behavior/Anomaly-based, Signature-
based, Heuristic
Content-based Signatures - CORRECT ANSWER Examine network packets or entries for
certain strings or flags
Context-based Signatures - CORRECT ANSWER Examine large patterns of activity to see
how they fit into surrounding activity
Major NIDS Components - CORRECT ANSWER Traffic controller, Analysis engine,
Reports, User interface
Intrusion Prevention System (IPS) - CORRECT ANSWER Monitors network traffic for
malicious behavior to block, reject, or redirect in real-time
, Specifics of IPS - CORRECT ANSWER Has signature database, content based inspection,
protocol inspection, must sit in-line, but struggles with encryption
Honeypot - CORRECT ANSWER "Digital Sandbox" designed to contain and observe
attackers without risk
Honeynet - CORRECT ANSWER A collection of two or more honeypots
Protocol Analyzer (Packet Sniffer) - CORRECT ANSWER A software or hardware system
that can capture and decode traffic for IDS purposes
False Positive - CORRECT ANSWER When an alarm is created for benign traffic
False Negative - CORRECT ANSWER When hostile activity goes undetected and creates a
false sense of security
Baselining - CORRECT ANSWER Establishing a system's security state to create a safe and
secure "baseline"
Network Segmentation - CORRECT ANSWER Using network addressing schemes like
protocols and structure to restrict communication between machines and prevent potential
attacks
Supervisory Control and Data Acquisition (SCADA) - CORRECT ANSWER A control
system designed to integrate automated tools in a cyber-physical environment
Blacklisting - CORRECT ANSWER Noting applications that are not allowed to run
Whitelisting - CORRECT ANSWER Listing allowed applications
UPDATED Exam Questions and CORRECT
Answers
Host-based IDs (HIDS) - CORRECT ANSWER An intrusion detection system that examines
activity on an individual system
Network-based IDs (NIDS) - CORRECT ANSWER An intrusion detection system that
examines network activity that crosses it's path
Anomaly detection model - CORRECT ANSWER IDS model that builds a profile of normal
activity and detects variances
Misuse detection model - CORRECT ANSWER IDS model that relies on predefined
signatures to identify malicious activity and responds with programmed reactions
IDS Operation Categories - CORRECT ANSWER Behavior/Anomaly-based, Signature-
based, Heuristic
Content-based Signatures - CORRECT ANSWER Examine network packets or entries for
certain strings or flags
Context-based Signatures - CORRECT ANSWER Examine large patterns of activity to see
how they fit into surrounding activity
Major NIDS Components - CORRECT ANSWER Traffic controller, Analysis engine,
Reports, User interface
Intrusion Prevention System (IPS) - CORRECT ANSWER Monitors network traffic for
malicious behavior to block, reject, or redirect in real-time
, Specifics of IPS - CORRECT ANSWER Has signature database, content based inspection,
protocol inspection, must sit in-line, but struggles with encryption
Honeypot - CORRECT ANSWER "Digital Sandbox" designed to contain and observe
attackers without risk
Honeynet - CORRECT ANSWER A collection of two or more honeypots
Protocol Analyzer (Packet Sniffer) - CORRECT ANSWER A software or hardware system
that can capture and decode traffic for IDS purposes
False Positive - CORRECT ANSWER When an alarm is created for benign traffic
False Negative - CORRECT ANSWER When hostile activity goes undetected and creates a
false sense of security
Baselining - CORRECT ANSWER Establishing a system's security state to create a safe and
secure "baseline"
Network Segmentation - CORRECT ANSWER Using network addressing schemes like
protocols and structure to restrict communication between machines and prevent potential
attacks
Supervisory Control and Data Acquisition (SCADA) - CORRECT ANSWER A control
system designed to integrate automated tools in a cyber-physical environment
Blacklisting - CORRECT ANSWER Noting applications that are not allowed to run
Whitelisting - CORRECT ANSWER Listing allowed applications
