GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

IPS

Deleted user 13 questions Updated 11 Apr 2019

Take the quiz

This quiz has question types that open in the usual player.

Questions in this quiz (13)

  1. 1A known, confirmed attack
    Detected when a file or traffic matches a signature pattern:
    1- lPS signatures
    2- WAF signatures
    3- Antivirus signatures
    Example: Exploit of known application vulnerabilities
    1. AExploit
    2. BAnomaly
  2. 2Can be zero-day or denial of service attacks (DoS)
    Detected by behavioral analysis:
    1-Rate-based IPS signatures
    2-DoS policies
    3-Protocol constraints inspection
    Example: Abnormally high rate of traffic (DoS/flood)
    1. AExploit
    2. BAnomaly
  3. 3Flow-based detection and blocking :
    1. AKnown exploits that match signatures
      Network errors and protocol anomalies
    2. BKnown exploits and protocol anomalies
      Network errors that match signatures
  4. 4IPS Components‘ IPS signature databases ‘ Protocol decoders IPS engine (Select 3)
    1. AIPS signature databases
    2. BProtocol decoders
    3. CIPS engine
    4. DIPS Protocol decoders
    5. EIPS engine databases
  5. 5IPS engine (Select 5)
    1. AApplication control
    2. BAnti-virus (flow based)
    3. CWeb filter (flow based)
    4. DEmail filter (flow based)
    5. EData Leak Prevention (DLP) (flow based in one-arm sniffer mode)
    6. FAnti-virus (flow based in one-arm sniffer mode)
    7. GIPS (flow based)
    8. HAnti-spam (flow based)
  6. 6Decoders parse protocols.
    lPS signatures find parts of a protocol that don’t conform.
    For example, too many HTTP headers, or a buffer overflow attempt
    Unlike proxy-based scans, IPS often does not require IANA standard ports.
    Automatically selects decoder for protocol at each OSI layer
    1. AWhat Are Protocol Decoders?
    2. BWhat Are Protocol?
    3. CWhat Are Decoders?
  7. 7IPS packages are updated by FortiGuard. (Select 3)
    1. AIPS signature databases
    2. BProtocol decoders
    3. CIPS engine
    4. DIPS Protocol
    5. EIPS databases
    6. FIPS signature
  8. 8Choosing the Signature Database
    - [blank_start]Regular[blank_end] : Common attacks with fast, certain identification (default action is block)

    - [blank_start]Extended[blank_end] : Performance-intensive
    1. ARegular
    2. BExtended
  9. 9In fact, because of its size, the extended database is only available for FortiGate models with a smaller disk or RAM. But, for high-security networks, you might be required to enable the extended signatures database.
    1. ATrue
    2. BFalse
  10. 10Configuring IPS sensors
    1. ATwo ways:
      Add signatures
      Add filters
    2. BThree ways:
      Add signatures
      Add filters
      Add IPS profile in the policy

Information

Description
User has deleted their subject information Quiz on IPS, created by Deleted user on 20/09/2018.
Author
Deleted user
Language
English
Views
33
History
Created on 20 Sep 2018 · updated on 11 Apr 2019

Feedback

What is it about?

What do you think of the new look?

How do you like it?