What is a difference between inline traffic interrogation and traffic mirroring?

1. A. Inline inspection acts on the original traffic data flow
2. B. Traffic mirroring passes live traffic to a tool for blocking
3. C. Traffic mirroring inspects live traffic for analysis and mitigation
4. D. Inline traffic copies packets for analysis and security

Correct Answer: A
Inline traffic interrogation analyzes traffic in real time and has the ability to prevent certain traffic from being forwarded Traffic mirroring doesn't pass the live traffic instead it copies traffic from one or more source ports and sends the copied traffic to one or more destinations for analysis by a network analyzer or other monitoring device

Which process is used when IPS events are removed to improve data integrity?

1. A. data availability
2. B. data normalization
3. C. data signature
4. D. data protection

Correct Answer: B

What are two denial of service attacks? (Choose two.)

1. A. MITM
2. B. TCP connections
3. C. ping of death
4. D. UDP flooding
5. E. code red

Correct Answer: CD

What are two social engineering techniques? (Choose two.)

1. A. privilege escalation
2. B. DDoS attack
3. C. phishing
4. D. man-in-the-middle
5. E. pharming

Correct Answer: CE

What is the impact of false positive alerts on business compared to true positive?

1. A. True positives affect security as no alarm is raised when an attack has taken place, while false positives are alerts raised appropriately to detect and further mitigate them.
2. B. True-positive alerts are blocked by mistake as potential attacks, while False-positives are actual attacks Identified as harmless.
3. C. False-positive alerts are detected by confusion as potential attacks, while true positives are attack attempts identified appropriately.
4. D. False positives alerts are manually ignored signatures to avoid warnings that are already acknowledged, while true positives are warnings that are not yet acknowledged.

Correct Answer: C