Quiz: Intrusion prevention fundamentals

Do you really need to listen to Chapter One of the Cisco Press book "Intrusion Detection Fundamentals?" Take this quiz and find out!

Directions: Check your answers as you go -- or fill in the blanks using UPPER CASE LETTERS and get your score after you've completed the quiz.

1. This describes any attack strategy where the attacker purposely makes it confusing and difficult for interested parties to figure out who initiated the attack.
   
   Your answer:
   

   See answer

   
   
   
2. Did you know that you can "rent" this kind of PC network for attack purposes from organized crime? The creation of these networks is one reason PCs are hijacked (either physically or virtually.)
   
   Your answer: (two words)
   

   See answer

   
   
   
3. Replacement login was a popular attack strategy aimed at _____________ computers. Attackers used dumb terminals to replace the real login prompt with a capture program.
   
   Your answer:
   

   See answer

   
   
   
4. This type of malware was accidently invented in 1988 by a Cornell graduate student who wanted to count the number of hosts connected to the Internet.
   
   Your answer:
   

   See answer
   
   
   

5. Although it's more vulnerable to attack, this computing architecture has largely replaced mainframes because it has a lower cost of ownership.
   
   Your answer:
   

   See answer
   

   
   
   
6. The 1998 Chernobyl virus, capable of deleting all the data on your hard drive including the BIOS, was spread by this portable media.
   
   Your answer:
   

   See answer

   
   
   
7. This is the first malware to actually infect other files in addition to replicating itself. Discovered in 2001, it was categorized as a high-level threat for its delivery mechanism, its complexity, its target and its impact. Although its name was meant to be cute, nobody thought it was funny.
   
   Your answer:
   

   See answer

   
   
   
8. Many times the dollar impact of an attack is related to the intent of the attacker. What kind of attack is initiated to slow down productivity?
   
   Your answer:
   

   See answer

   
   
   
9. Intrusion detection systems use this mode of operation to examine the actual traffic on your network. Although the system is able to react to an attack by setting off an alarm or resetting TCP/IP connections, it still can't prevent an attack from reaching the target.
   
   

   Your answer:
   

   See answer

   
   
   
10. An intrusion prevention system is able to prevent an attack from reaching the target because it acts as a forwarding device on this layer of the open systems interconnection model.
    
    Your answer:
    

    See answer