2 cissp ® Official Study Guide Eighth Edition

797
7.
Of the following choices, what indicates the primary purpose of an intrusion detection
system (IDS)?
A.
Detect abnormal activity
B.
Diagnose system failures
C.
Rate system performance
D.
Test a system for vulnerabilities
8.
Which of the following is true for a host-based intrusion detection system (HIDS)?
A.
It monitors an entire network.
B.
It monitors a single system.
C.
It’s invisible to attackers and authorized users.
D.
It cannot detect malicious code.
9.
Which of the following is a fake network designed to tempt intruders with unpatched and 
unprotected security vulnerabilities and false data?
A.
IDS
B.
Honeynet
C.
Padded cell
D.
Pseudo flaw
10.
Of the following choices, what is the best form of anti-malware protection?
A.
Multiple solutions on each system
B.
A single solution throughout the organization
C.
Anti-malware protection at several locations
D.
One-hundred-percent content filtering at all border gateways
11.
When using penetration testing to verify the strength of your security policy, which of the 
following is 
not
recommended?
A.
Mimicking attacks previously perpetrated against your system
B.
Performing attacks without management knowledge
C.
Using manual and automated attack tools
D.
Reconfiguring the system to resolve any discovered vulnerabilities
12.
What is used to keep subjects accountable for their actions while they are authenticated to a 
system?
A.
Authentication
B.
Monitoring