GCIA Practice Test practice questions, page 19 of 21, with answer review and explanations.
Question 91
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based routed network. You have recently come to know about the Slammer worm, which attacked computers in 2003 and doubled the number of infected hosts every 9 seconds or so. Slammer infected 75000 hosts in the first 10 minutes of the attack. To mitigate such security threats, you want to configure security tools on the network. Which of the following tools will you use?
Intrusion Prevention Systems
Firewall
Intrusion Detection Systems
Anti-x
Question 92
Host-based IDS (HIDS) is an Intrusion Detection System that runs on the system to be monitored. HIDS monitors only the data that it is directed to, or originates from the system on which HIDS is installed. Besides monitoring network traffic for detecting attacks, it can also monitor other parameters of the system such as running processes, file system access and integrity, and user logins for identifying malicious activities. Which of the following tools are examples of HIDS? Each correct answer represents a complete solution. Choose all that apply.
HPing
BlackIce Defender
Tripwire
Legion
Question 93
booting process of Linux operating system stores the location of Kernel on the hard drive?
/boot/boot.b
/boot/map
/sbin/lilo
/etc/lilo.conf
Question 94
Which of the following techniques allows probing firewall rule-sets and finding entry points into the targeted system or network?
Network enumerating
Packet collision
Distributed Checksum Clearinghouse
Packet crafting
Question 95
What is the function of TRACERT utility?
Trace the path taken by TCP/IP packets to a remote computer.
Provide the host name of the routing device.
Trace the MAC address of the target host's network adapter.