Questions
Answer the following questions to test your knowledge of this chapter:
- What’s the difference between an IDS and IPS?
- An IDS proactively blocks malicious activity whereas an IPS only detects it
- An IPS proactively blocks malicious activity whereas an IDS only detects it
- Nothing – they are the same
- Thousands of dollars in potential overhead costs
- Which potential threat is network activity occurring at precise intervals a potential symptom of?
- An extremely rigid employer
- A potential configuration error on a device
- Automation and scripting
- A bot that is beaconing to an external C2 server
- The process of converting a programmer’s code into machine language is known at what?
- Compiling
- Compelling
- Controlling
- Careful translation
- What is a HIDS?
- An IDS that is funded by a single entity
- An IDS that can also be configured to serve as an IPS
- An IDS that is placed on a single endpoint to protect only that device
- All of the above
- Is programming/coding or software...