Information Security - ch9

A(n) ______ is a software program or hardware appliance that can intercept, copy, and interpret network traffic.

• port scanner

• packet sniffer

• honeypot

• honey packet

_____ testing is a straightforward testing technique that looks for vulnerabilities in a program or protocol by feeding random input to the program or a network running the protocol.

• Buzz

• Fuzz

• Spike

• Black

_____ is the action of luring an individual into committing a crime to get a conviction.

• Entrapment

• Enticement

• Intrusion

• Padding

_____ applications use a combination of techniques to detect an intrusion and then follow it back to its source.

• Honeynet

• Trap-and-trace

• HIDPS

• Packet Sniffer

To determine whether an attack has ocurred or is underway, NIDPSs compare measured activity to known ______ in their knowledge base.

• vulnerabilities

• fingerprints

• signatures

• footprints

Administrators should encourage users to experiment with hackerware tools as they assist the organization in detecting potential vulnerabilities in the systems.

• True

• False

A fully distributed IDPS control strategy is an IDPS implementation approach in which all control functions are applied at the physical location of each IDPS component.

• True

• False

Intrusion detection and prevention systems can deal effectively with newly published attacks or variants of existing attacks.

• True

• False

Your organization’s operational goals, constraints, and culture should not affect the selection of the IDPS and other security tools and technologies to protect your systems.

• True

• False

In order to determine which IDPS best meets an organization’s needs to consider the system environment, security goals and objectives and the existing security policy.

• True

• False