Chapter 7 Review

You need to gather information about a network attacker but you want to prevent the attacker from knowing that their attempt has been detected. What is the best solution?

• Deploy a protocol analyzer

• Deploy a NIPS outside the perimeter of the network.

• Deploy a proxy server on the perimeter of the network.

• Deploy a honeypot on the perimeter of the network.

Which of the following security applications cannot proactively detect computer anomalies?

• NIDS

• Antivirus software

• Personal software firewall

• HIPS

Which of the following types of firewalls provides inspection of data at layer 7 of the OSI model?

• Application-proxy

• Stateful inspection

• Circuit-level gateway

• Network address translation

Which of the following are best practices when installing and securing a new computer for a home user?

• Apply a default admin password

• Install a firewall

• Install remote control software.

• Disable updates

Which of the following is a type of packet filtering used by firewalls that retains memory of the packets that pass through the firewall?

• Stateless packet filter

• NAT filtering

• Circuit-level gateway

• Stateful packet inspection

Which device uses stateful packet inspection?

• Firewall

• Hub

• Switch

• IDS

Of the following, which type of device attempts to serve client requests without the user actually contacting the remote server?

• HTTP proxy

• Firewall

• DMZ

• IP proxy

A client contracts you to prevent users from accessing inappropriate websites. Which of the following technologies should you implement?

• NIDS

• IP proxy

• Honeypot

• Internet content filter

James has detected an intrusion in his company. What should he check first?

• The Event Viewer

• DNS logs

• Performance logs

• Firewall logs

Which tool would you use if you want to view the contents of a packet?

• TDR

• Port scanner

• Loopback adapter

• Protocol analyzer