In o der to obtain evidence of crime, it is necessary to master the technology ofintrusion tracking Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

• A.Link test technology determines the source of the attack by testing the network link between the routers
• B.Snallow mail behavior analysis can analyze the information such as sending IF address, sending time, sending frequency, number of recipients, shallow email heacers and so on.
• C.Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques
• D.Packet Recording Technology marks packets on each passing router by inserting trace data into the tracked IP packets

Comment: *

Name: *

Email: *

Verification: *

When the firewall hard disk is in place, which of the following is correct description for the firewall log?

• A.The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.
• B.The administrator can use the threat logto understand the user's security risk behavior and the reason for being alarmed or blocked.
• C.The administrator can learn the security policy of the traffic hit through the policy hit log. And use it for fault location when the problem occurs.
• D.The administrator can advertise the content log to view the detection and defense records of network threats.

Comment: *

Name: *

Email: *

Verification: *

When establishing their own information systems, companies check each operation according to internationally established authoritative standards and can check whether their information systems are safe

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

Which of the following is not included in the Corporate Impact Analysis (BIA)?

• A.Risk identification
• B.Accident handling priority
• C.Business priority
• D.Impact assessment

Comment: *

Name: *

Email: *

Verification: *

Regarding the problem that the two-way binding user of the authentication-free method cannot access the networkresources, which of the following options are possible reasons? (Multiple choice)

• A.The authentication-free user does not use the PC with the specified IP/MAC address.
• B.Online users have reached a large value
• C.The authentication-free user and the authenticated user are in the same security zone
• D.The authentication action in the authentication policy is se- to "No credit / free authentication"

Comment: *

Name: *

Email: *

Verification: *