Online Access Free 412-79 Practice Test

What is a difference between host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS)?

• A.NIDS are standalone hardware appliances that include network intrusion detection capabilities whereas HIDS consist of software agents installed on individual computers within the system.
• B.HIDS requires less administration and training compared to NIDS.
• C.Attempts to install Trojans or backdoors cannot be monitored by a HIDS whereas NIDS can monitor and stop such intrusion events.
• D.NIDS are usually a more expensive solution to implement compared to HIDS.

Firewall is an IP packet filter that enforces the filtering and security policies to the flowing network traffic.
Using firewalls in IPv6 is still the best way of protection from low level attacks at the network and transport layers. Which one of the following cannot handle routing protocols properly?

• A."Internet-firewall -net architecture"
• B."Internet-firewall-router-net architecture"
• C."Internet-firewall/router(edge device)-net architecture"
• D."Internet-router-firewall-net architecture"

Firewall and DMZ architectures are characterized according to its design. Which one of the following architectures is used when routers have better high-bandwidth data stream handling capacity?

• A."Three-Homed Firewall" DMZ Architecture
• B.Strong Screened-Subnet Architecture
• C.Weak Screened Subnet Architecture
• D."Inside Versus Outside" Architecture

John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

• A.C:\Windows\System32\restore
• B.C:\WINDOWS\system32\cmd.exe
• C.C:\WINNT\system32\drivers\etc
• D.C:\Windows\System32\Boot

Which one of the following is a command line tool used for capturing data from the live network and copying those packets to a file?

• A.Wireshark: Text2pcap
• B.Wireshark: Tcpdump
• C.Wireshark: Dumpcap
• D.Wireshark: Capinfos