Question 1

Which of the following is an intrusion detection system that reads all incoming packets and tries to find suspicious patterns known as signatures or rules?

Options :

A : HIDS

B : IPS

C : DMZ

D : NIDS

Answer: D

Question 2

An IDS or IDPS can be deployed in two modes. Which deployment mode allows the IDS to both detect and stop malicious traffic?

Options :

A : passive mode

B : inline mode

C : promiscuous mode

D : firewall mode

Answer: B

Question 3

Which of the following is a network analysis tool that sends packets with nontraditional IP stack parameters?

Options :

A : Nessus

B : COPS

C : SAINT

D : HPing

Answer: D

Question 4

Which of the following filters can be used to detect UDP scan attempts using Wireshark?

Options :

A : icmp.type==8 or icmp.type==0

B : icmp.type==15

C : icmp.type==3 and icmp.code==3

D : icmp.type==13

Answer: C

Question 5

Docker provides Platform-as-a-Service (PaaS) through ________ and delivers containerized software packages.

Options :

A : Server-level virtualization

B : Network-level virtualization

C : OS-level virtualization

D : Storage-level virtualization

Answer: C