5-4

Question 1

a software honeypot solution. comprised of a dedicated pc with the _________ program running. can emulate the major internet protocols thus appearing to be a fully functional server

Answer 1

Specter

Question 2

specter works by runnning a number of _________ common to a network serers

Answer 2

services

Question 3

specter logs all trafficto the server for analysis. user can set it up in one of 5 modes

Answer 3

open
secure
failing
strange
aggressive

Question 4

on this mode the system behaves lika a badly configured server in terms of security. the downside of this mode is that you are most likely to attract and catch the least skillful hacker

Answer 4

Specter open mode

Question 5

this mode had the system behaving like secure server

Answer 5

Specter secure mode

Question 6

this mode is interesting in that it causes the system to behave like a server with various hardware and software problems. this might attract some hakers because such a system is likely to be vulnerable

Answer 6

Specter failing mode

Question 7

in this mode the system behaves in unpredictable ways. this sort of behavior is likely to attract the attention of a more talented hacker and perhaps cause her tostay online longer to figure out what is going on. the longer the hacker stays connected the better the chance of tracing her.

Answer 7

Specter strange mode

Question 8

this mode causesthe system to actively try and trace back the intruder and derive his identity. this mode is most useful for catching the intruder.

Answer 8

aggrassive

Question 9

5 ways to configure fake passsword file in specter

Answer 9

easy
normal
hard
fun
warning

Question 10

the first symantec product was a ________

Answer 10

decoy server

Question 11

this product simulated being a real server by simulating many server functions such as incoming and outgoing traffic

Answer 11

symantec decoy server

Question 12

the decoy server serves as a honeypot and an __________

Answer 12

IDS

Question 13

an atempt is made to attract the intruder to a subsystem set up for the purpose of obvseving him

Answer 13

intrusion deflection

Question 14

involves simply trying to make the system seem like a less palatable taget

Answer 14

intrusion deterrence