Section 5 Flashcards
firewalls
○ Maintain control over traffic that flows in and out of networks
○ Examine packets
stateful packet inspection
Can watch traffic over a given connection
Deep packet inspection
Analyze actual content of traffic that flows through
Proxy servers
○ Special firewalls
○ Pertain to applications
○ Provide security and performance features
Kismet
detect wireless access points
Scanners
○ Tools that enable you to interrogate devices and networks for information
Packet sniffer examples
tcpdump, wireshark
What are two main methods of an IDS?
signature based, anomaly based
Which set of policies and procedures outlines the steps an organization will take during a state of emergency to replace IT infrastructure?
disaster recovery
Which network security tool deliberately configures a system with fabricated vulnerabilities to detect and monitor the activities of an attacker?
honeypot
Which type of controls employ measures such as policies, procedures, and guidelines to protect people?
administrative controls