cype

IPS could be a host-based prevention solution

• True

• False

Which ip address should be denied inbound on a router interfacethatconnected to internet

• Ipv4 loopback address

• Echo

• destination IP address and port

• attack exploits unreported vulnerability

IDS can detect attack immediately:

• True

• False

Next generation firewall is stateless

• False

• True

It is possible to edit an access list after applying it on an interface

• True

• False

IPS has ability to prevent malicious encrypted traffic:

• False

• True

Standard access list should be implemented as close as possible tothe source host:

• False

• True

Which ICMP message type should be stopped inbound?

• source quench

• echo-reply

• echo

• unreachable

IPS/IDS sensor have ability to detect composite pattern:

• True

• False

There is an implicit deny (deny any any ) at the end of standard access list:

• False

• True