SYS 501

arp - s 192.168.1.1 00-3a-d1-fa-b1-06 CORRECT ANSWERS: A security administrator wants to implement a logon script that will prevent MITM attacks on the local LAN. Which of the following commands should the security administrator implement within the script to accomplish this task? A. arp - s 192.168.1.1 00-3a-d1-fa-b1-06 B. dig - .1.1 C. nmap - A - T4 192.168.1.1 D. tcpdump - lnv host 192.168.1.1 or either 00:3a:d1:fa:b1:06 To prevent duplicate values from being stored CORRECT ANSW...

Which category of IDS might increase logging activities, disable a service, or close a port as a response to a detected security branch? CORRECT ANSWERS: Active Detection Which port number does SSH use? CORRECT ANSWERS: Port 22 Which port number is used by SMB? CORRECT ANSWERS: TCP port 445 Which type of IDS or IPS uses an initial database of known attack types but dynamically alters their signatures based on learned behavior. CORRECT ANSWERS: Heuristic What is the size, in bits,...

Which of of the following BEST describes an important security advantages yielded by implementing vendor diversity? CORRECT ANSWERS: Resiliency A botnet has hit a popular website with a massive number of GRE-encapsulated packets to perform a DDoS attack. News outlets discover a certain type of refrigerator was exploited and used to send outbound packets to the website that crashed. To which of the following categories does the refrigerator belong? CORRECT ANSWERS: IoT In a corporation wh...