Intrusion Detection and Prevention Quiz

What is the primary function of an Intrusion Detection System (IDS)?

• To prevent unauthorized access to network resources

• To detect and alert on potential security threats

• To encrypt data transmissions

• To filter spam from email

Which of the following is a characteristic of an Intrusion Prevention System (IPS)?

• It is a passive system that only logs attacks

• It can take action to block or prevent malicious activity

• It is used primarily for data recovery

• It cannot be integrated with firewalls

Signature-based IDS/IPS systems are known for:

• High false positive rates due to anomaly detection

• Detecting zero-day attacks effectively

• Relying on predefined patterns of known threats

• Requiring no updates to detect new threats

What does the ‘Read’ permission allow a user to do in Windows file permissions?

• Modify the file or folder

• Execute a file

• View the file’s contents

• Change the file’s permissions

Which permission is required to change the attributes of a file in Windows?

• Read & Execute

• Full Control

• Modify

• Write

Which of the following is not a standard permission in Windows?

• Read

• Write

• Execute

• Print

If a user has ‘Modify’ permission for a file, what actions can they perform?

• Read, write, and execute the file

• Read and write the file, but not execute it

• Read, write, execute, and delete the file

• Only read the file

What is the primary purpose of a SIEM system?

• To manage network devices

• To enforce password policies

• To collect and analyze security-related events

• To install antivirus software on endpoints

Which feature of SIEM helps in identifying trends and patterns over time?

• Real-time alerting

• Log management

• Data aggregation

• Correlation

What does SIEM stand for?

• Security Information and Event Management

• Secure Internet Email Management

• System Intrusion Evaluation Module

• Security Integration and E-mail Monitoring