Chapter 7

1. What is the difference between an IDS and an IPS?
   1. An IDS proactively blocks malicious activity whereas an IPS only detects it
   2. An IPS proactively blocks malicious activity whereas an IDS only detects it
   3. Nothing – they are the same
   4. Thousands of dollars in potential overhead costs

   Answer: B – An IDS only “detects” whereas an IPS takes action to “prevent” malicious activity.

2. Which potential threat is network activity occurring at precise intervals a potential symptom of?
   1. An extremely rigid employer
   2. A potential configuration error on a device
   3. Automation and scripting
   4. A bot that is beaconing to an external C2 server

   Answer: D – An isolated bot that is communicating to a remote C2 server indicating that it’s likely a part of a larger botnet.

3. The process of converting a programmer’s code into machine language is known as what?
   1. Compiling
   2. Compelling
   3. Controlling
   4. Careful translation

   Answer: A – Compiling.

4. What is...