CYB Final Exam combined questions
and answers graded A+ passed
A passive IDPS response is a definitive action automatically initiated when certain types of alerts
are triggered. - ANS ✔False
An HIDPS can monitor system logs for predefined events. - ANS ✔true
A packet ____________________ is a software program or hardware appliance that can
intercept, copy, and interpret network traffic. - ANS ✔sniffer
Services using the TCP/IP protocol can run only on their commonly used port number as
specified in their original Internet standard. - ANS ✔False
List and describe at least four reasons to acquire and use an IDPS. - ANS ✔
A(n) event is an indication that a system has just been attacked or is under attack. - ANS ✔False
List and describe the three advantages of NIDPSs. - ANS ✔
Alarm filtering may be based on combinations of frequency, similarity in attack signature,
similarity in attack target, or other criteria that are defined by the system administrators.
_________________________ - ANS ✔False
In DNS cache poisoning, valid packets exploit poorly configured DNS servers to inject false
information and corrupt the servers' answers to routine DNS queries from other systems on the
network. - ANS ✔True
, Port explorers are tools used both by attackers and defenders to identify (or fingerprint) the
computers that are active on a network, as well as the ports and services active on those
computers, the functions and roles the machines are fulfilling, and other useful information.
_________________________ - ANS ✔False
The disadvantages of using the honeypot or padded cell approach include the fact that the
technical implications of using such devices are not well understood.
_________________________ - ANS ✔False
Once the OS is known, all of the vulnerabilities to which a system is susceptible can easily be
determined. - ANS ✔True
An IDPS can be configured to dial a phone number and produce an alphanumeric page or other
type of signal or message. - ANS ✔True
Security tools that go beyond routine intrusion detection include honeypots, honeynets, and
padded cell systems. - ANS ✔True
List and describe the four advantages of HIDPSs. - ANS ✔
Administrators who are wary of using the same tools that attackers use should remember that a
tool that can help close an open or poorly configured firewall will not help the network
defender minimize the risk from attack. - ANS ✔False
Enticement is the action of luring an individual into committing a crime to get a conviction.
_________________________ - ANS ✔False
Intrusion detection and prevention systems perform monitoring and analysis of system events
and user behaviors. - ANS ✔True
and answers graded A+ passed
A passive IDPS response is a definitive action automatically initiated when certain types of alerts
are triggered. - ANS ✔False
An HIDPS can monitor system logs for predefined events. - ANS ✔true
A packet ____________________ is a software program or hardware appliance that can
intercept, copy, and interpret network traffic. - ANS ✔sniffer
Services using the TCP/IP protocol can run only on their commonly used port number as
specified in their original Internet standard. - ANS ✔False
List and describe at least four reasons to acquire and use an IDPS. - ANS ✔
A(n) event is an indication that a system has just been attacked or is under attack. - ANS ✔False
List and describe the three advantages of NIDPSs. - ANS ✔
Alarm filtering may be based on combinations of frequency, similarity in attack signature,
similarity in attack target, or other criteria that are defined by the system administrators.
_________________________ - ANS ✔False
In DNS cache poisoning, valid packets exploit poorly configured DNS servers to inject false
information and corrupt the servers' answers to routine DNS queries from other systems on the
network. - ANS ✔True
, Port explorers are tools used both by attackers and defenders to identify (or fingerprint) the
computers that are active on a network, as well as the ports and services active on those
computers, the functions and roles the machines are fulfilling, and other useful information.
_________________________ - ANS ✔False
The disadvantages of using the honeypot or padded cell approach include the fact that the
technical implications of using such devices are not well understood.
_________________________ - ANS ✔False
Once the OS is known, all of the vulnerabilities to which a system is susceptible can easily be
determined. - ANS ✔True
An IDPS can be configured to dial a phone number and produce an alphanumeric page or other
type of signal or message. - ANS ✔True
Security tools that go beyond routine intrusion detection include honeypots, honeynets, and
padded cell systems. - ANS ✔True
List and describe the four advantages of HIDPSs. - ANS ✔
Administrators who are wary of using the same tools that attackers use should remember that a
tool that can help close an open or poorly configured firewall will not help the network
defender minimize the risk from attack. - ANS ✔False
Enticement is the action of luring an individual into committing a crime to get a conviction.
_________________________ - ANS ✔False
Intrusion detection and prevention systems perform monitoring and analysis of system events
and user behaviors. - ANS ✔True
