Which of the following categories of suspicious traffic may contain signatures such as ping of death and SYN flood attempts?Group of answer choicesInformationalDenial of serviceReconnaissanceUnauthorized access

Signature based detection is the most common type of detectionQuestion 3AnswerTrueFalse

What does a signature-based IDS use to identify attacks?answerComparison of current statistics to past statisticsStatistical analysis to find unusual deviationsExceeding threshold valuesComparisons to known attack patterns

Which of the following describes a false positive when using an IPS device?answerLegitimate traffic being flagged as maliciousMalicious traffic not being identifiedMalicious traffic masquerading as legitimate trafficThe source address identifying a non-existent hostThe source address matching the destination address

James, a security team member, was assessing the security across organizational assets. He identified sudden fluctuations in the bandwidth consumption and repeated login attempts being made from remote hosts. Which of the following types of intrusion attempt James has identified in the above scenario?Group of answer choicesNetwork intrusionsSystem intrusionsFile system intrusionsPhysical intrusions

3. An attack in which the site is not capable of answering valid request.Select one:a.Smurfingb.Denial of servicec.E-mail bombingd.Ping storm