¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

IPS

Usuario eliminado 13 preguntas Actualizado el 11 abr 2019

Hacer el test

Este test tiene tipos de pregunta que se abren en el reproductor de siempre.

Preguntas del test (13)

  1. 1A known, confirmed attack
    Detected when a file or traffic matches a signature pattern:
    1- lPS signatures
    2- WAF signatures
    3- Antivirus signatures
    Example: Exploit of known application vulnerabilities
    1. AExploit
    2. BAnomaly
  2. 2Can be zero-day or denial of service attacks (DoS)
    Detected by behavioral analysis:
    1-Rate-based IPS signatures
    2-DoS policies
    3-Protocol constraints inspection
    Example: Abnormally high rate of traffic (DoS/flood)
    1. AExploit
    2. BAnomaly
  3. 3Flow-based detection and blocking :
    1. AKnown exploits that match signatures
      Network errors and protocol anomalies
    2. BKnown exploits and protocol anomalies
      Network errors that match signatures
  4. 4IPS Components‘ IPS signature databases ‘ Protocol decoders IPS engine (Select 3)
    1. AIPS signature databases
    2. BProtocol decoders
    3. CIPS engine
    4. DIPS Protocol decoders
    5. EIPS engine databases
  5. 5IPS engine (Select 5)
    1. AApplication control
    2. BAnti-virus (flow based)
    3. CWeb filter (flow based)
    4. DEmail filter (flow based)
    5. EData Leak Prevention (DLP) (flow based in one-arm sniffer mode)
    6. FAnti-virus (flow based in one-arm sniffer mode)
    7. GIPS (flow based)
    8. HAnti-spam (flow based)
  6. 6Decoders parse protocols.
    lPS signatures find parts of a protocol that don’t conform.
    For example, too many HTTP headers, or a buffer overflow attempt
    Unlike proxy-based scans, IPS often does not require IANA standard ports.
    Automatically selects decoder for protocol at each OSI layer
    1. AWhat Are Protocol Decoders?
    2. BWhat Are Protocol?
    3. CWhat Are Decoders?
  7. 7IPS packages are updated by FortiGuard. (Select 3)
    1. AIPS signature databases
    2. BProtocol decoders
    3. CIPS engine
    4. DIPS Protocol
    5. EIPS databases
    6. FIPS signature
  8. 8Choosing the Signature Database
    - [blank_start]Regular[blank_end] : Common attacks with fast, certain identification (default action is block)

    - [blank_start]Extended[blank_end] : Performance-intensive
    1. ARegular
    2. BExtended
  9. 9In fact, because of its size, the extended database is only available for FortiGate models with a smaller disk or RAM. But, for high-security networks, you might be required to enable the extended signatures database.
    1. AVerdadero
    2. BFalso
  10. 10Configuring IPS sensors
    1. ATwo ways:
      Add signatures
      Add filters
    2. BThree ways:
      Add signatures
      Add filters
      Add IPS profile in the policy

Información

Descripción
El usuario ha eliminado su información de asignaturas Test sobre IPS, creado por Usuario eliminado el 20/09/2018.
Autor
Usuario eliminado
Idioma
English
Visitas
33
Historial
Creado el 20 sep 2018 · actualizado el 11 abr 2019

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?