H12-722_V3.0 무료 덤프문제 온라인 액세스

Regarding the description of intrusion detection technology, which of the following statements is correct?

• A.It is impossible to detect violations of security policies.
• B.Unable to find traces of the system being attacked.
• C.is an active and static security defense technology.
• D.It can detect all kinds of authorized and unauthorized intrusions.

Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.

• A.True
• B.False

Misuse detection is through the detection of similar intrusions in user behavior, or those that use system flaws to indirectly violate system security rules To detect intrusions in the system. Which of the following is not a feature of misuse detection 2

• A.Easy to upgrade
• B.Accurate detection
• C.Easy to implement
• D.Effective detection of impersonation detection of legitimate users

The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)

• A.Good concealment, the network-based monitor does not run other applications, does not provide network services, and may not respond to other computers, so Not vulnerable to attack.
• B.Need a lot of monitors.
• C.The monitoring speed is fast (the problem can be found in microseconds or seconds, and the host-based DS needs to take an analysis of the audit transcripts in the last few minutes
• D.It can detect the source address and destination address, identify whether the address is illegal, and locate the real intruder.

Threats detected by the big data intelligent security analysis platform will be synchronized to each network device at the same time C and then collected from the network device Collect it in the log for continuous learning and optimization.

• A.True
• B.False