INASEC1-SecurityTechnology 2324B

1. Intrusion detection systems (IDSs) detect potential intrusions and sound an alarm.

• True

• False

2. The more recently developed intrusion prevention systems (IPSs) also detect intrusions and can also take action to defend the network.

• True

• False

3. An intrusion detection and prevention system (IDPS) works like a burglar alarm by detecting network traffic that is a violation of the rules with which it is configured (corresponding to an opened or broken window) and activates an alarm.

• True

• False

4. A network-based IDPS (NIDPS) monitors network traffic, and when a predefined event occurs, it responds and notifies the appropriate administrator

• False

• True

5. A host-based IDPS (HIDPS) resides on a particular computer or server and monitors activity on that system.

• True

• False

6. Signature-based IDPSs, also known as knowledge-based IDPSs, examine data traffic for patterns that match signatures, which are preconfigured, predetermined attack patterns.

• False

• True

7. Statistical anomaly-based IDPSs, also known as behavior-based IDPSs, collect data from normal traffic and establish a baseline.

• True

• False

8. Selecting IDPS products that best fit an organization’s specific needs is a challenging and complex process since there are a wide array of products and vendors, each with its own approach and capabilities

• True

• False

9. Deploying and implementing IDPS technology is a complex undertaking that requires knowledge of the system and experience with the technology.

• True

• False

10. Honeypots are decoy systems designed to lure potential attackers away from critical systems.

• True

• False