DCOM 212 Final fully solved graded A+ 2023/2024 already passed

DCOM 212 Final A(n) ____________________ is a honey pot that has been protected so that it cannot be easily compromised - correct answer padded cell When a collection of honeypots connects several honeypot systems on a subnet, it may be called a(n) honeynet. _________________________ - correct answer True ____________________ is the process of attracting attention to a system by placing tantalizing bits of information in key locations. - correct answer Enticement A(n) ____________________ system contains pseudo-services that emulate well-known services, but is configured in ways that make it look vulnerable to attacks. - correct answer honeypot __________ is the action of luring an individual into committing a crime to get a conviction - correct answer Entrapment When a collection of honeypots connects several honeypot systems on a subnet, it may be called a(n) ____________________. - correct answer honey net If you see a /16 in the header of a snort rule, what does it mean - correct answer the subnet mask is 255.255.0.0 Enticement is the action of luring an individual into committing a crime to get a conviction. - correct answer False Security tools that go beyond routine intrusion detection include honeypots, honeynets and padded cell systems - correct answer True When using trap-and-trace, the trace usually consists of a honeypot or padded cell and an alarm. - correct answer False __________ are decoy systems designed to lure potential attackers away from critical systems. - correct answer Honeypots __________ applications use a combination of techniques to detect an intrusion and then trace it back to its source. - correct answer Trap and trace A padded cell is a hardened honeynet. - correct answer False The process of entrapment is when an attacker changes the format and/or timing of their activities to avoid being detected by an IDPS. - correct answer False Which method for detecting certain types of attacks uses an algorithm to detect suspicious traffic, is resource intensive, and requires extensive tuning and maintenance? - correct answer heuristic Remediation would include the cleaning of systems, rebuilding from installation media, or abandonment due to persistent mechanisms installed in the hardware - correct answer True __________ collect data the ingress and egress from a host system - correct answer Agent Incident levels would include - correct answer Represents the highest degree of threat Represents a more serious threat Might be managed quickly Anomaly-based systems permit a custom rule base which would allow the IDPS to be used immediately - correct answer False