Quiz
2.1. Network Security - IDS
This quiz has question types that open in the usual player.
Questions in this quiz (30)
1I[blank_start]ntrusion[blank_end] D[blank_start]etection[blank_end] S[blank_start]ystem[blank_end]
- Antrusion
- Bnstruction
- Cndividual
- Detection
- Eirectory
- Fevice
- Gystem
- Hoftware
- Ipecialized
2How does IDS detect intrusions?
- AAnomaly detection
- BSignature Detection
- CBanned IP Addresses
- DPatterns
3What is Anomaly detection in IDS?
- ADetect Statistical variations compared to known system baselines
- BMatch activity against the patterns for known attacks
- CPerforms action in response to alert
4What kind of things are looked for in Anomaly detection in IDS?
- ACPU Utilisation
- BDisk Activity
- CLogins
- DSignatures
- EIncorrect passwords
5How does Signature recognition work in IDS?
- AMatch the activity against the patterns for known attacks
- BDetect statistical variations compared to known system baselines
- CUses HIDS and NIDS to provide maximum coverage
6There are problems with IDS Signature Recognition
- ATrue
- BFalse
7What are the main types of IDS?
- ANetwork Based (NIDS)
- BHost Based (HIDS)
- CDistributed or Hybrid
- DAntivirus
- EAnti malware
- FIPS
8N[blank_start]etwork[blank_end] I[blank_start]ntrusion[blank_end] D[blank_start]etection[blank_end] S[blank_start]ystem[blank_end] (NIDS)
- Aetwork
- Baming
- CAT
- Dntrusion
- Enformation
- Fnternet
- Getection
- Hevice
- Ietails
- Jystem
- Koftware
- Lpecialized
9H[blank_start]ost[blank_end] I[blank_start]ntrusion[blank_end] D[blank_start]etection[blank_end] S[blank_start]ystems[blank_end] (HIDS)
- Aost
- Belpful
- Cybrid
- Dntrusion
- Enternet
- Fnformation
- Getection
- Hevice
- Ietail
- Jystems
- Koftware
- Lignature
10What is a Distributed of Hybrid IDS?
- AHost and Network based IDS used together
- BAn IDS that can keep changing based on new signatures and anomalies
- CAn IPS mixed with an IDS
11Why use a Distributed or Hybrid IDS?
- AProvide maximum coverage
- BBecause NIDS do not protect Host machines and vise versus
- CTo catch internal employees out as well as external attacks
12What can IDS' be?
- AReactive
- BPassive
- CSignature
- DAnomaly
13What does a Reactive system do?
- APerforms action in response to an alert
- BNotifies an administrator of an alert
- COnly does something when told to
14Name 4 requirements of IDS?
- ARun continually
- BImpose minimal overhead
- CBe configured according to system security policies
- DScale to monitor large numbers of systems
- EBe told which anomalies and signatures to look for
- FWork with Anti-Malware and Anti-Virus
15What does a NIDS do?
- AMonitors all traffic on a network segment and searches for known patterns
- BMonitors all traffic on a network segment
- CAdds a specialized layer of security software to vulnerable or sensitive systems
16What do NIDS consist of?
- AOne or more network sensors
- BOne or more management console
- CAgents
- DA map of all normal network traffic
- EHealth checkers
17What do NIDS typically compare?
- AString signatures
- BPort signatures
- CHeader signatures
- DIP Signatures
- EVirus Signatures
18NIDS are difficult to deploy in switched environments
- ATrue
- BFalse
19N[blank_start]etwork[blank_end] I[blank_start]ntrusion[blank_end] P[blank_start]revention[blank_end] S[blank_start]ystems[blank_end]
- Aetwork
- Becessary
- Cormal
- Dntrusion
- Edentification
- Fn
- Grevention
- Holicy
- Iackets
- Jystems
- Koftware
- Legment
20What does NIPS do?
- AMonitors all traffic on a network segment
- BMonitors all traffic on a network segment and searches for known patterns
- CAdds a specialized layer of security software to vulnerable or sensitive systems
21What does NIPS map?
- AAll normal network traffic
- BAny known signatures and errors
- CAll devices and information about them
22Caution should be taken when creating a baseline for NIPS
- ATrue
- BFalse
23In a NIPS system, what would happen if something outside acceptable parameters is located?
- AQuarantined or denied access
- BAllowed access but administrator is warned
- CAll systems shut down and go into Limp mode
24N[blank_start]etwork[blank_end] A[blank_start]ccess[blank_end] C[blank_start]ontrol[blank_end]
- Aetwork
- Bormal
- CAT
- Dccess
- Eddress
- Fll
- Gontrol
- Homputer
- Iaution
25N[blank_start]etwork[blank_end] A[blank_start]ccess[blank_end] P[blank_start]rotection[blank_end]
- Aetwork
- Bormal
- Coted
- Dccess
- Ell
- Fnything
- Grotection
- Hrevention
- Irograms
26What is included in NAC/NAP:
- ADefines who can connect and how they can connect to network resources
- BRemote or local connections
- CCheck health of any device before it is allowed to connect
- DHealth of device can be monitored
- ENTFS Permissions
- FShare permissions
- GAdministrator access
27What does a HID do?
- AAdds a specialized layer of security software to vulnerable or sensitive systems
- BMonitors all traffic on a network segment
- CMonitors all traffic on a network segment, and searches for known patterns
28What 2 things can HIDS use?
- AAnomaly approaches
- BSignature/Heuristics Approaches
- CPort checking approach
- DIP Address approach
29What are the primary focuses of HIDS?
- ADetect intrusions
- BLog suspicious events
- CSend alerts
- DUpdate signature updates for all other devices on the networks
- EPrevent intrusions
30HIDS can detect both external and internal intrusions
- ATrue
- BFalse
Information
- Description
- Technical Security Fundamentals (2.1. Describe Security Procedures) Quiz on 2.1. Network Security - IDS, created by Louise Howard on 06/09/2018.
- Author
- Louise Howard
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz