CHAPTER 4: IDS AND IPS

Three aspects that are vulnerable in network system are _______. (choose 3 answers)

• Network system that provide more resources.

• Network systems to facilitate resource sharing.

• Global protection towards user and machine.

• Global protection policies.

(a)   method is typically best used for identifying known threats.

Anomaly-based Method use to detect unknown malware attacks.

• True

• False

X in the diagram refers to ________.

• Pattern-based

• Abnormal-based

• Signature-based

• Detection-based

In _______, the raw data can be compressed without loss of relevant information.

• data post-processing

• data patch

• data classifier

• data pre-processing

NIDS is abbreviation of (a)   .

IPS stands for _______.

• Intruder Progression System

• Intrusion Post System

• Intrusion Prevention System

• Intruder Post System

IDS can not block attacks.

• True

• False

We need _____ to detect attacks and other security violations that are not prevented by other security measures.

• IPS

• IDN

• IDS

• IPN

________ represents the number of instances that are classified by the IDS as being anomalous and that really are anomalous.

• True Positive (TP)

• True Negative (TN)

• False Positive (FP)

• False Negative (FN)