QUESTION: 33

Messy, a network defender, was hired to secure an organization's internal network. He deployed an IDS in which the detection process depends on observing and comparing the observed events with the normal behavior and then detecting any deviation from it. Identify the type of IDS employed by Messy in the above scenario.

Signature-based
Stateful protocol analysis
Anomaly-based
Application proxy

Answer(s): C

Explanation:

Anomaly-based IDS is a type of IDS that detects intrusions by comparing the observed network events with a baseline of normal behavior and identifying any deviation from it. Anomaly-based IDS can detect unknown or zero-day attacks that do not match any known signature, but they can also generate false positives due to legitimate changes in network behavior. Anomaly-based IDS can use various techniques to model the normal behavior, such as statistical analysis, machine learning, or artificial intelligence. Anomaly-based IDS is the type of IDS employed by Messy in the above scenario, as he deployed an IDS that depends on observing and comparing the observed events with the normal behavior and then detecting any deviation from it.

Reference:

Anomaly-Based Intrusion Detection System - Chapter 2: Anomaly-Based Intrusion Detection System Network Defense Essentials (NDE) | Coursera - Week 10: Intrusion Detection and Prevention Systems A systematic literature review for network intrusion detection system (IDS) - Section 3.2: Anomaly- based IDS

Reveal Solution Next Question

QUESTION: 34

Joseph, a cloud administrator, was recruited for the management and deployment of the software containers. As part of his job, Joseph employed an automated solution that converts images into containers, deploys them to the hosts, and further monitors container workflow from a single location.
Identify the solution employed by Joseph in the above scenario.

Port scanners
Orchestrators
Network monitors
Sniffers

Answer(s): B

Explanation:

Orchestrators are tools that automate container deployment, administration, and scaling tasks. They allow you to reliably manage fleets of hundreds or thousands of containers in production environments. Orchestrators simplify container admin by letting you think in terms of application components instead of individual containers. They're able to take control of all your app's requirements, including config values, secrets, and network services. Orchestrators are the solution employed by Joseph in the above scenario, as he used an automated solution that converts images into containers, deploys them to the hosts, and further monitors container workflow from a single location.

Reference:

13 Most Useful Container Orchestration Tools in 2024 - Spacelift Network Defense Essentials - CERT - EC-Council - Module 6: Virtualization and Cloud Computing

Reveal Solution Next Question

QUESTION: 35

Mary was surfing the Internet, and she wanted to hide her details and the content she was surfing over the web. She employed a proxy tool that makes his online activity untraceable. Identify the type of proxy employed by John in the above scenario.

SOCKS proxy
Anonymous proxy
Reverse proxy
Explicit proxy

Answer(s): B

Explanation:

anonymous proxy is a type of proxy that hides the user's IP address and other identifying information from the web servers they access. An anonymous proxy acts as an intermediary between the user and the internet, and it modifies the HTTP headers to prevent the web servers from tracking the user's location, browser, or device. An anonymous proxy can help the user bypass geo-restrictions, censorship, and online surveillance. However, an anonymous proxy does not encrypt the user's traffic, and it may still leak some information to the proxy provider or other third parties. An anonymous proxy is the type of proxy employed by Mary in the above scenario, as she used a proxy tool that makes her online activity untraceable.

Reference:

What is a Proxy Server and How Does it Work?
13 Best Proxy Tools for PC [2024 Reviewed] - Section: Anonymous proxies The Fastest Free Proxy

Reveal Solution Next Question

QUESTION: 36

Which of the following actors in the NIST cloud deployment reference architecture acts as an intermediary for providing connectivity and transport services between cloud consumers and providers?

Cloud provider
Cloud auditor
Cloud consumer
Cloud carrier

Answer(s): D

Reveal Solution Next Question

Free 112-51 Exam Braindumps

QUESTION: 33

Explanation:

Reference:

QUESTION: 34

Explanation:

Reference:

QUESTION: 35

Explanation:

Reference:

QUESTION: 36