Regarding scanning and snooping attacks, which of the following descriptions is wrong?

• A.It is usually the network detection behavior before the attacker launches the real attack.
• B.Scanning attacks include address scanning and port scanning.
• C.The source address of the scanning attack is real, so it can be defended by adding direct assistance to the blacklist.
• D.When a worm virus breaks out, it is usually accompanied by an address scanning attack, so scanning attacks are offensive.

Comment: *

Name: *

Email: *

Verification: *

Which of the following iterations is correct for the description of the management center?

• A.The data coking device is responsible for the cleaning of abnormal flow, the centralized management and configuration of equipment, and the presentation of business reports.
• B.The data collector and management server support distributed deployment and centralized deployment.
  Centralized deployment has good scalability.
• C.The management server of the management center is responsible for the cleaning of abnormal flow, as well as the collection and analysis of business data, and storage, and is responsible for the summary The stream is reported to the management server for report presentation.
• D.The management center is divided into two parts: management server and teaching data collector.

Comment: *

Name: *

Email: *

Verification: *

An enterprise administrator configures the Web reputation system as shown in the figure.
Which of the following statements is true about this configuration?

• A.In addition to this page configuration, you need to enable the linkage between the firewall and the sandbox. Otherwise, the page configuration is invalid.
• B.After the configuration is complete, you need to submit the configuration for it to take effect.
• C.The content of number 4 is mandatory.
• D.The content of number 2 is mandatory.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the common behavioral characteristics of a virus? (Multiple Choice)

• A.Self-hiding features
• B.Network attack characteristics
• C.Information collection features
• D.Download and Backdoor Features

Comment: *

Name: *

Email: *

Verification: *

Misuse detection is through the detection of similar intrusions in user behavior, or those that use system flaws to indirectly violate system security rules To detect intrusions in the system. Which of the following is not a feature of misuse detection 2

• A.Easy to implement
• B.Effective detection of impersonation detection of legitimate users
• C.Accurate detection
• D.Easy to upgrade

Comment: *

Name: *

Email: *

Verification: *