Certified Ethical Hacker Network Security and Scanning 4

Question 1

What is the primary function of an Intrusion Detection System (IDS)?

Accepted Answer

To monitor traffic and alert on suspicious activity

Answer

To block all inbound traffic

Answer

To encrypt network packets

Answer

To assign IP addresses

Question 2

How does a signature-based IDS detect attacks?

Accepted Answer

By matching traffic against a database of known attack patterns

Answer

By learning normal baseline behavior

Answer

By blocking all encrypted traffic

Answer

By scanning open ports

Question 3

Which evasion technique splits a malicious payload across multiple packets?

Accepted Answer

Fragmentation

Answer

Port knocking

Answer

DNS tunneling

Answer

Banner grabbing

Question 4

What distinguishes an IPS from an IDS?

Accepted Answer

An IPS can actively block or drop malicious traffic

Answer

An IPS only logs events

Answer

An IPS assigns DHCP leases

Answer

An IPS cannot inspect packets

Question 5

A honeypot is best described as what?

Accepted Answer

A decoy system designed to attract and study attackers

Answer

A type of firewall rule

Answer

An encryption algorithm

Answer

A load balancer

Question 6

Which technique can be used to evade signature-based detection during a scan?

Accepted Answer

Encoding or obfuscating the payload

Answer

Increasing the TTL only

Answer

Using a static source port

Answer

Sending all traffic in cleartext

Question 7

What is the purpose of a DMZ in network architecture?

Accepted Answer

To isolate public-facing servers from the internal network

Answer

To store all passwords

Answer

To replace the firewall entirely

Answer

To speed up DNS lookups