Crowdly

What is a signature-based detection method in IDS/IPS?

It encrypts all network traffic to prevent unauthorized access

It blocks all incoming network traffic

It analyzes network traffic for known patterns or signatures of known attacks

t monitors network performance metrics

Which of the following is NOT a feature of Suricata IDS/IPS?

Log analysis

Signature-based detection

Protocol analysis

Real-time traffic inspection

What is a brute force attack?

A social engineering attack to trick users into revealing their passwords

An attack that exploits software vulnerabilities

An attack that involves physically damaging computer hardware

A method of defeating a cryptographic scheme by trying a large number of possibilities

Which of these is an example of a software vulnerability?

SQL Injection

XSS (Cross-Site Scripting)

Physical theft of a device

Phishing email

Weak password

Authorization Bypass

Which is a common practice to prevent Injection vulnerabilities?

Save code in a private repository

Regularly updating antivirus software

Using strong passwords

Input validation and parameterized queries

Which of the following is a tactic category in the MITRE ATT&CK framework?

Software Development

Credential Access

Data Encryption

Risk Management

What does the MITRE ATT&CK framework primarily focus on?

Developing security software

Cataloging common types of malware

Network performance optimization

Documenting adversary tactics and techniques

Which of the following is a legal requirement for conducting a penetration test?

A certification in network security

No permission is required if vulnerabilities are found

Verbal agreement with the system's owner

Written permission from the system's owner

A hacking license

Which of the following is a common phase in penetration testing?

Reporting

Exploitation

Reconnaissance

Finding vulnerabilities

Installation of security patches

Prevent attacks