ISC2 CC Network Security 2

Question 1

What is the key difference between an IDS and an IPS?

Accepted Answer

An IDS detects and alerts while an IPS also actively blocks detected threats

Answer

An IDS is hardware-based; an IPS is software-based

Answer

An IPS only monitors incoming traffic while an IDS monitors all traffic

Answer

They are identical in function and can be used interchangeably

Question 2

What protocol does HTTPS use to secure web communications?

Accepted Answer

TLS (Transport Layer Security)

Answer

SSL only

Answer

IPSec

Answer

SSH

Question 3

What is a man-in-the-middle (MITM) attack?

Accepted Answer

An attacker secretly intercepting and potentially altering communications between two parties

Answer

An attack where a hacker gains physical access to a server

Answer

An insider threat from a current or former employee

Answer

An attack targeting database servers with SQL injection

Question 4

What is a denial of service (DoS) attack?

Accepted Answer

Overwhelming a system with traffic or requests to make it unavailable to legitimate users

Answer

Stealing user credentials through phishing

Answer

Intercepting encrypted network communications

Answer

Escalating privileges on a compromised system

Question 5

What type of malware replicates itself across networks without requiring user action?

Accepted Answer

Worm

Answer

Trojan

Answer

Virus

Answer

Spyware

Question 6

What is phishing?

Accepted Answer

A social engineering attack using fraudulent communications to steal sensitive information

Answer

A technique for scanning open network ports

Answer

An attack that targets web application databases with malicious queries

Answer

A technique for cracking encrypted passwords offline