Defense

Question 1

Patching

Answer 1

Corrects a known bug or vulnerability

Question 2

Security Policy

Answer 2

Set of guidelines for network use.
Includes AUP, continually changing document
Governing Policy

Question 3

AUP

Answer 3

Appropriate Use Policy

Acceptable Use Policy

Question 4

Vulnerability Scanner

Answer 4

Tests network for weakness

Nessus, Nmap

Question 5

Honey Pot

Answer 5

Appears as an attractive target

Honey net - multiple honey pots

Question 6

ACL

Answer 6

Access Control List

List of permitted / denied traffic for routers

Question 7

Root Guard

Answer 7

Prevents another switch in STP from becoming the root

Question 8

BPDU Guard

Answer 8

Identifies rogue switches in STP topology

Question 9

Flood Guard

Answer 9

In STP, prevents flooding frames from causing a DoS

Question 10

Software firewall

Answer 10

Firewall software to protect the computer it is running on

Question 11

Hardware Firewall

Answer 11

Network appliance that acts as a firewall

Question 12

Packet-Filtering Firewall

Answer 12

Filters traffic based on ACL-like rules

Question 13

Stateful Firewall

Answer 13

Inspects traffic leaving the network, compares it to incoming traffic

Question 14

Firewall Zones

Answer 14

There can be different rules for each zone

Question 15

UTM Firewalls

Answer 15

Unified Threat Management Firewalls

Bundles multiple security functions ins a single device

Question 16

Signature-Based Detection

Answer 16

Primary method of detection for IDS/IPS

Signature files need to be updated

Question 17

Policy-Based Detection

Answer 17

Detection method for IDS/IPS

Based on specific declarations or identifying unsecure protocols.

Question 18

Anomaly-Based Detection

Answer 18

Detection method for IDS/IPS

Prone to false positives

Question 19

Statistical Anomaly Detection

Answer 19

Form of Anomaly-Based Detection

Watches network traffic and builds a baseline

Question 20

Nonstatistical Anomaly Detection

Answer 20

Form of Anomaly-Based Detection

Admin states what traffic should be. More prone to false positives.

Question 21

NIPS

Answer 21

Network Intrusion Prevention System

Question 22

HIPS

Answer 22

Host Intrusion Prevention System