DIT 2043 Security Technology

What is the primary function of an Intrusion Detection System (IDS)?

• To monitor network or system activities for malicious activities

• To block all network traffic

• To manage user permissions

• To create backups of data

Which of the following is NOT a type of Intrusion Detection System?

• Signature Based Intrusion Detection System

• Data Loss Prevention System (DLPS)

• Network Based Intrusion Detection System (NIDS)

• Host Based Intrusion Detection System (HIDS)

What does Access Control primarily regulate?

• The physical security of a building

• Who or what can view or use resources

• The amount of data stored

• The speed of the network

Which of the following is a benefit of using a Virtual Private Network (VPN)?

• Increased physical security

• Extended geographic connectivity

• Reduced internet speed

• Limited access to resources

What is the main purpose of a firewall?

• To monitor user activities

• To control access between a private network and the public network

• To store sensitive data

• To provide antivirus protection

What is the difference between identification and authentication?

• Identification is verifying a user, while authentication is labeling a user

• Identification is only for network access

• Identification is labeling a user, while authentication is verifying a user

• Both terms mean the same thing

Which type of authentication checks one set of values at a time?

• Behavior Based Authentication

• Single Rule Based Factor Authentication

• Multi-factor Authentication

• Token Based Authentication

What does a Network Based Intrusion Detection System (NIDS) monitor?

• Only outbound traffic

• User activities on individual devices

• Only inbound traffic

• Network traffic to and from all network devices

Which of the following is a type of Access Control permission?

• Hardware Permissions

• File Permissions

• User Permissions

• Network Permissions

What is a characteristic of a Statistical Anomaly Based Intrusion Detection System?

• It only monitors outbound traffic

• It compares user behavior against an established baseline

• It requires manual input for detection

• It uses a fixed set of rules to detect threats