Evading IDS, Firewalls and Honeypots
SKILLSET
To engage in malicious activity against networking and computing systems while being undetected by networking security hardware.
Related Questions
- Which of these would initiate countermeasures against security breach attempts:
- An IDS can alert a system administrator using which of these means:
- Which of the default table chains does the forwarding firewall need to be aware of:
- An IDS technician is analyzing IDS logs when he realizes connections from the outside of the LAN have been sending packets where the Source IP address and Destination IP addresses are the same. The IDS however, did not send any alerts via email nor did it log anything. Which type of alert/situation is this?
- What does a hacker seek to normally do when evading a firewall?
- Snort output reports are tested on the Certified Ethical Hacker examination. Snort rules are used to generate alerts based on the traffic that is viewed by the IDS processing engine. All of these are possible rule headers EXCEPT?
- Deep packet inspection, all the way up to the payload, is done by:
- Which of the following is a client-server tool utilized to evade firewall inspection?
- Which of these techniques is useful for evading firewalls?
- Which of these protocols may be deployed by a network attacker for anti-forensic purposes?