Question

8. Which of the following is true about firewalls and their ability to adapt in a network? a. Firewalls can interpret human actions and make decisions outside their programming. b. Because firewalls are not programmed like a computer, they are less error prone s. Firewalls are flexible and can adapt to new threats aFirewalls deal strictly with defined patterns of measured observation 9 Which of the following is a reason organization use intrusion detection system? To collect data. To deter crime in increasing fear. To help management with quality assurance and continuous improvement. D All of the above a b. 10. Which of the following functions CANNOT be dohe by intrusion detection systems? a. Quickly contain an attack and prevent the loss or damage. b. Detect and deal with preambles to attacks. Estimate the cost of an attack as soon as possible. Identify intrusion and send out alert. 11. All of the following are true about network-based intrusion detection and prevention systems (NIDPS) EXCEPT a. Resides on a computer or an appliance connected to a segment of an organization's network b. Looks for attack patterns within network traffic. Installed at specific place in the network where it can monitor traffic going into and out of a particular network segment d. Protects both the network and host computers. 12. IDPSs perform the following functions well EXCEPT which one? a. Managing OS audit and logging mechanisms and data they generate b. Alerting appropriate staff when attacks are detected Measuring enforcement of security policies encoded in the analysis engine d. Automatically investigating attacks without human intervention activities finalize the restoration of operations to a normal state ane 13, Intrusion seek to identify the source and method of the intrusion in order to ensure that the same type attack cannot occur again. a. prevention b. reaction correction c. detection

Answer 1

Answer:-----------

8. d. Firewalls deal strictly with defined patterns of measured observation

9. d. All of the above

10. c.  Estimate the cost of an attack as soon as possible

11. d.  Protects both the network and host computers

12. d.  Automatically investigating attacks without human intervention

13. d. correction