Network Devices

Question 1

False positive

Answer 1

Normal or expected activity is incorrectly identified as abnormal or unexpected activity (problematic situation). This is a decision device status, this status often results in time spent diagnostic a mod issue

Question 2

Appliance

Answer 2

Is a self contained resource, that provided a specific function.
1. Passive- network device simply allow data to pass through (patch panels)
2. Active - network devices can control or modify data as it passes through the network
3. Inline - network device sits directly in the path of network traffic and actively processes data packets and they pass through it

Question 3

True negative

Answer 3

Abnormal or unexpected activity is correctly identified (good) - decision device status

Question 4

True positive

Answer 4

Normal or expected activity is correctly identified (good) - decision device status

Question 5

Network tap device

Answer 5

Passive device used to monitor network traffic by copying all the packets that pass through a network connection

Question 6

Sensor

Answer 6

Is a device that collects information about the network or host. Sensor can report and/or act

Question 7

Fail-open

Answer 7

Device failure status, mode means that the network traffic device allows network traffic to continue to flow even in the device fails. Setting is intended to sent disruptions to network connectivity and to minimize the impact or hardware or software failures on network operations. Second name is fail-safe. Allows traffic to continue flow

Question 8

False negative

Answer 8

Abnormal or unexpected activity is incorrectly identified as normal or expected (dangerous). This is device decision status. This decision state often results in a problem not being identified which could result in a successful attack.

Question 9

Fail closed

Answer 9

Device failure mode. Means that the network device blocks network traffic even if device fails. Is intended to ensure network security by preventing unauthorized access to network resources in the event of a hardware or software failure. Second name is fail-secure. Will stop traffic

Question 10

Collector

Answer 10

Is a device that performs targeted collection which feeds into an aggregation or colleration engine