Overview

Sample Questions:You are concerned about attacks against your network, and have decided to implement some defensive measure on your routers. If you have 3 interfaces, S1, S0, and E0, and you implement the following configuration, what attack will you be defending against? Router# config terminal Router(config)# Interface Ethernet 0 Router(config-if)#no ip directed broadcast Router(config-if)#Interface Serial 0 Router (config-if) #no ip directed broadcast Router(config-if)#Interface Serial 1 Router(config-if)#no ip directed broadcast Router(config)#^Z Router#SmurfBO2KSub SevenAny TrojanAny WormYou are configuring your new IDS machine, where you have recently installed Snort. While you are working with this machine, you wish to create some basic rules to test the ability to log traffic as you desire. Which of the following Snort rules will log any tcp traffic from any IP address to any port between 1 and 1024 on any host in the 10.0.10.0/24 network?log tcp 0.0.0.0/24 -> 10.0.10.0/24 11024log tcp any any -> 10.0.10.0/24 11024log tcp any any -> 10.0.10.0/24 1:1024log tcp 0.0.0.0/24 -> 10.0.10.0/24 1:1024log udp any any -> 10.0.10.0/24 1:1024You are in the process of configuring your network firewall policy. As you begin building the content of the policy you start to organize the document into sections. Which of the following are sections found in the firewall policy?The Acceptable Use StatementThe Firewall Administrator StatementThe Network Connection StatementThe Incident Handling StatementThe Escalation Procedures StatementYou have just installed a new Intrusion Detection System in your network. You are concerned that there are functions this system will not be able to perform. What is a reason an IDS cannot manage hardware failures?The IDS can only manage RAID 5 failures.The IDS cannot be programmed to receive SNMP alert messages.The IDS cannot be programmed to receive SNMP trap messages.The IDS cannot be programmed to respond to hardware failures.The IDS can only inform you that an event happened.At a policy meeting you have been given the task of creating the firewall policy. What are the two basic positions you can take when creating the policy?To deny all traffic and permit only that which is required.To permit only IP traffic and filter TCP trafficTo permit only TCP traffic and filter IP trafficTo permit all traffic and deny that which is required.To include your internal IP address as blocked from incoming to prevent spoofing.Your company has created it's security policy and it's time to get the firewall in place. Your group is trying to decide whether to build a firewall or buy one. What are some of the benefits to purchasing a firewall rather than building one?They usually have a good management GUI.They offer good logging and alerting.You do not need to configure them.The OS doesn't need to be hardened before installing the vendor's firewall on it.They often do real time monitoring.

Skills

Reviews