Single-packet attacks are classified into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death belongs to special packet attacks.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

Which of the following descriptions are correct based on proxy-based anti-virus gateways?

• A.More advanced operations such as decompression and shelling can be performed
• B.System overhead will be small
• C.All files are cached through the gateway own protocol stack
• D.The detection rate is higher than the flow scan mode

Comment: *

Name: *

Email: *

Verification: *

Regarding the processing flow of file filtering, which of the following statements is wrong?

• A.After the file decompression fails, the file will still be filtered. .
• B.The application identification module can identify the type of application that carries the file.
• C.Protocol decoding is responsible for analyzing the file data and file transmission direction in the data stream.
• D.The file type recognition module is responsible for identifying the true type of the file and the file extension based on the file data

Comment: *

Name: *

Email: *

Verification: *

Part of the reason why the APT attack becomes difficult to defend is that it uses the vulnerabilities to attack.
This kind of zero-day hole usually requires flowers
A lot of time to research and analyze and produce corresponding defense methods.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following behaviors is a false positive of the intrusion detection system?

• A.Web-based attacks are not detected by the system
• B.The process of trying to log in to the system is recorded
• C.Use Ping to perform network detection and be alerted as an attack
• D.Unable to detect new types of worms

Comment: *

Name: *

Email: *

Verification: *