Certified Ethical Hacker Network Security and Scanning 4

Question 1

What is the primary function of an Intrusion Detection System (IDS)?

Accepted Answer

To monitor traffic and alert on suspicious activity

Answer

An IDS monitors network or host activity and raises alerts on suspicious or malicious patterns.

Question 2

How does a signature-based IDS detect attacks?

Accepted Answer

By matching traffic against a database of known attack patterns

Answer

Signature-based IDS compares traffic to a database of known malicious patterns or signatures.

Question 3

Which evasion technique splits a malicious payload across multiple packets?

Accepted Answer

Fragmentation

Answer

Fragmentation breaks the payload across packets so an IDS may fail to reassemble and detect it.

Question 4

What distinguishes an IPS from an IDS?

Accepted Answer

An IPS can actively block or drop malicious traffic

Answer

An IPS is inline and can actively block or drop malicious traffic, while an IDS only detects and alerts.

Question 5

A honeypot is best described as what?

Accepted Answer

A decoy system designed to attract and study attackers

Answer

A honeypot is a deliberately vulnerable decoy used to lure, detect, and analyze attackers.

Certified Ethical Hacker Practice Test