FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 12: Security Through Monitoring and Auditing

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 21

Multiple Choice

Review LaterAdd Note

Review Later

Which active intrusion-detection tool monitors HTML activity and blocks attacks?

A) Entercept
B) AppShield
C) Snort
D) StormWatch

E) B) and C)
F) B) and D)

Correct Answer

verified

Show Answer

Question 22

True/False

Review LaterAdd Note

Review Later

In Windows 2000 Server, is it necessary to install Network Monitor and Network Monitor Driver separately?

A) True
B) False

Correct Answer

verified

Show Answer

Question 23

Multiple Choice

Review LaterAdd Note

In Netware 6.x, what directory contains the Audit log and the Console log?

In Mac OS X, which log contains information about printing activities?

In Window Server 2003, does the print$ share enable you to view the number of clients currently using the server as a print server?

Which type of intrusion detection system looks for intrusion signatures on ports, through frame and packet headers, and through commands?

Which active intrusion-detection tool monitors for intruders and can take action on the basis of preestablished security policies?

Which file is being edited in the figure above?

What five activities are typically encompassed by host-based IDS?

List eight server monitoring functions that can be viewed using the Netware MONITOR command.

In Red Hat Linux, the ____________________ Log provides information about jobs that are scheduled to run or that have already run, such as information about the number of minutes until a specific job will run.

If % Network utilization is frequently over 90 percent, that means the network is experiencing collisions and there may be bottlenecks due to the network design, possibly indicating the need to create more or different subnets.

Which type of IDS looks for excessive use of a computer's resources, such as the CPU or memory?

What five things do inspectors typically look for?

Typically, an IDS ____________________ is software that automatically records information to a log.

In Windows Server 2003, the ____________________ log records information about how software applications are performing.

Network Monitor supports event management , which enables a server administrator to set up filters to capture a certain event or type of network activity.

Host wrapper software, which may also be called a(n) ____________________, monitors network activity into or out of the computer, including protocols, packets, broadcasts, remote logon attempts, dial-in attempts, port scanning, and other activities.

Does the Netware Remote Manager allow you to send messages to a particular user or to all users?

What are the three principle event logs in Windows 2000 Server and Windows Server 2003?