ICS Domain 2 Review

Sample IDS log entry: "Device with MAC address XX:XX:XX:XX:XX:XX attempted to access the guest wireless network. Access was denied based on MAC address filtering policy."

• MAC addresses remain the same, but IP addresses change

• IDS can detect host MAC address quicker than the IP address

• MAC addresses can not be spoofed, but IP addresses are susceptible to spoofing

• MAC addresses are easier to secure because they don't send data across networks

Which of the following is not true about IP addresses?

• Any IP address starting with 10 is private

• Trusted networks contain all non-routable IP addresses

• Any IP address starting with 192 is private

• Most trusted networks use private IP addresses

Which of the following is not typically located in a company's DMZ?

• Email server

• Directory services

• Proxy server

• Web server

This security technology is used to watch for potential threats, and log suspicious activities.

• IDS

• IPS

• NAT

• Proxy server

Which of the following do switches and wireless access points use to control access through a device?

• IP address filtering

• Port number filtering

• MAC address filtering

• Session filtering

What type of address is this?

2001:0db8:0000:abcd:0000:0000:0000:7334

• IPv6

• IPv4

I sit between the internet and the network. I protect the network, by blocking viruses, malware and worms. I can be both hardware and software

• Router

• Firewall

• Ethernet Cable

• Modem

Provide an IDS log sample based on the given questions.

• It encrypts network traffic

• It monitors network traffic for suspicious activity

• It blocks all incoming traffic

• It manages user access rights

What is the MOST common form of host-based IDS that employs signature or pattern-matching detection methods?

• Anti-Virus

  software

• Motion Detectors

• Firewall

• Honeypots

This type of attack overwhelms a server by sending more GET requests than the server can handle.