FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 12: Security Through Monitoring and Auditing

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 31

Multiple Choice

Review LaterAdd Note

Review Later

Gathering performance statistics each time a new software application is installed, on slow, average, and peak periods during its use, and tracking how many users are on that software is an example of acquiring a _____.

A) baseline
B) framework
C) foundation
D) utilization level

Correct Answer

verified

Show Answer

Question 32

Multiple Choice

Review LaterAdd Note

Review Later

In the event log, a notice that a service has started would be indicated with what type of symbol?

A) A blue "i" displayed in a white comment bubble
B) A black "!" that appears on a yellow caution symbol
C) A white "x" that appears inside a red circle
D) A red "x" that appears inside a white circle

Correct Answer

verified

Show Answer

Question 33

Multiple Choice

Review LaterAdd Note

Which Network Monitor statistic shows total traffic in frames for broadcasts, unicasts, and multicasts?

Network-based intrusion-detection software is used on a computer or network device and typically places the NIC on that device in ____________________ mode.

In Mac OS X, the FTP Log keeps track of file uploads, downloads, and communications with FTP servers.

In Windows Server 2003 event viewer, an informational message such as a notice that a service has been started is prefaced by a black "!" (exclamation point) that appears on a yellow caution symbol.

Is the Process Viewer used by Linux Red Hat 9.x to display a listing of processes and the users who are running those processes?

At minimum, active intrusion detection alerts a server or network administrator about an attack or intrusion, so the administrator can take action.

In Network Monitor the capture store is the amount of RAM and virtual memory that is used to store captured data.

Are the Server logs for Mac OS X automatically rotated?

File locks are open communication links between two processes on the server or between the server and a client.

In Windows Server 2003, the ____________________ log records information about logon accesses and file, folder, and system policy changes.

In Red Hat Linux, the Emacs and vi editors can be used to configure the syslog.conf file.

Which passive intrusion-detection tool audits activities on multiple operating systems, filters them, and collects the information into one large database for analysis of intrusions?

Which of the following are examples of active intrusion-detection tools?

An inspector is an IDS that tracks a full range of data and events related to an operating system or network.

Understanding the normal conditions for operating systems and a network is accomplished by establishing baselines .

Which of the following activities are usually looked for using passive intrusion-detection tools?

In event log, a warning that a CD-ROM is not loaded would be indicated by what type of symbol?

What two useful tools does NetWare offers to view user connections?