Quiz 500-280

Quiz 500-280, Securing Cisco Networks with Open Source Snort

Which protocol operates below the network layer?

Which area is created between screening devices in an egress/ingress path for housing web, mail, or DNS servers?

What does protocol normalization do?

which protocol does Snort focus to decode, process, and alert on suspicious network traffic?

Which technique can an intruder use to try to evade detection by a Snort sensor?

What is one such countermeasure?

Which IPS placement option is the noisiest?

What is the purpose of using a span or monitor port on a switch?

Which item examines packets for malformation, anomalies, and protocol compliance and gathers and presents packets in one consistent fashion?

Which component is one of the four primary components of Snort?