ISF QUIZ-2023-24

A required, structured data classification scheme that rates each collection of information as well as each user.

• Mandatory access controls

• Discretionary access controls

• Nondiscretionary controls

• None of the both

The access control mechanism that represents the matching of an authenticated entity to a list of information assets and corresponding access levels.

• Authentication

• Authorization

• Identification

• Accountability

Attacker attempts to gain entry or disrupt normal operation.

• Intrusion

• authentication

• identification

• access control

The measure of an IDPS’s ability to correctly detect and identify certain types of attacks.

• Confidence value:

• Threat identification
• Intrusion prevention
• Attack precision

__________Intrusion detection system is usually installed on a web server.

• Protocol-based (PIDS)

• Application protocol-based (APIDS)

• Network-based intrusion detection system (NIDS)

• Signature-based

---

IDS is designed to detect unknown attacks, going beyond the identification of attack signatures.

• Signature-based

• Anomaly-based

• Host based

_____IDS collects statistical summaries by observing traffic that is known to be normal.

• Behaviour-Based IDPS

• knowledge-based IDPS

• The stateful packet inspection approach

• None

---

term refers to a fake device which is deployed in a network to attract unknown traffic.

• Honey net

• network

• honey pot

• all of the above

---

honepot Attacks on Database like SQL-Injections are very common.

• email honey pot

• malware Honey pot

• Database Honey Pot

• All of the above

is the organized research of the Internet addresses owned or controlled by a target organization.

• honeynet

• foot printing

• honey pot

• none