Which of the following types of attacks are DDoS attacks? 2I

• A.Snooping scan attack
• B.Single packet attack
• C.Floating child attack
• D.Malformed message attack

Comment: *

Name: *

Email: *

Verification: *

The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)

• A.The monitoring speed is fast (the problem can be found in microseconds or seconds, and the host-based DS needs to take an analysis of the audit transcripts in the last few minutes
• B.Good concealment, the network-based monitor does not run other applications, does not provide network services, and may not respond to other computers, so Not vulnerable to attack.
• C.It can detect the source address and destination address, identify whether the address is illegal, and locate the real intruder.
• D.Need a lot of monitors.

Comment: *

Name: *

Email: *

Verification: *

The results of the RBL black and white list query on the firewall are as follows:

Based on the above information only, which of the following statements is correct? (multiple choice)

• A.Mail with source address 10.17.1.0/24 will be blocked
• B.Mail with source address 10.18.1.0/24 will be released
• C.Mail with source address 10.17.1.0/24 will be released
• D.Mail with source address 10.18.1.0/24 will be blocked

Comment: *

Name: *

Email: *

Verification: *

Abnormal detection is to establish the normal behavior characteristic profile of the system subject through the analysis of the audit data of the system: check if the audit data in the system If there is a big discrepancy with the normal behavior characteristics of the established subject, it is considered an intrusion. Nasu must be used as the system subject? (multiple choice)

• A.Single user
• B.Host
• C.A group of users
• D.A key program and file in the system

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is wrong about Huawei anti-virus technology?

• A.The virus detection system cannot directly detect compressed files
• B.Gateway anti-virus implementation is based on proxy scanning and flow scanning
• C.The maximum number of unpacked layers of the gateway antivirus default file is 3
• D.Anti-virus engine can detect file type by file extension

Comment: *

Name: *

Email: *

Verification: *