On which layer of the OSI Reference Model does the FWSnort utility function?
The FWSnort utility functions as a transport layer inline IPS.
An analyst wants to see a grouping of images that may be contained in a pcap file. Which tool natively meets this need?
To detect worms and viruses buried deep within a network packet payload, Gigabytes worth of traffic content entering and exiting a network must be checked with which of the following technologies?
The security team wants to detect connections that can compromise credentials by sending them in plaintext across the wire. Which of the following rules should they enable on their IDS sensor?
When identifying malware, what is a key difference between a Worm and a Bot?
You are responding to an incident involving a Windows server on your company's network. During the investigation you notice that the system downloaded and installed two files, iexplorer.exe and iexplorer.sys. Based on the behavior of the system you suspect that these files are part of a rootkit. If this is the case what is the likely purpose of the .sys file?
What information would the Wireshark filter in the screenshot list within the display window?
How does the Cisco IOS IP Source Guard feature help prevent spoofing attacks?
Which command tool can be used to change the read-only or hidden setting of the file in the screenshot?
attrib --r or +r will remove or add the read only attribute from a file.
Enabling port security prevents which of the following?
