You are going to add another computer to the pool that you use for detecting intrusions. This time
you are making a customized Snort machine running on Windows 2000 Professional. Prior to
running Snort you must install which of the following programs?

You have recently installed ISA Server 2006 as your firewall, and are building some new rules. If
you need to create a rule that will be based upon a Network Set, which of the following would you
select in the Toolbox?

During the configuration of your newly installed ISA Server 2006, you are creating new rules.
Which three of the following answers are used to create a protocol rule in ISA Server 2006?

In the command ipchains -N chain , what will the -N accomplish in the chain?

You are reviewing your companys IPTables Firewall and see the command (minus the quotes) ” !
10.10.216″ as part of a rule, what does this mean?

You are configuring the Access Lists for your new Cisco Router. The following are the commands
that are entered into the router for the list configuration.
Router(config)#access-list 55 deny 10.10.12.0 0.0.0.255
Router(config)#access-list 55 permit 0.0.0.0 255.255.255.255
Router(config)#interface E1
Router(config-if)#ip access-group 55 out
Router(config-if)#interface S0
Router(config-if)#ip access-group 55 out
Based on this configuration, and using the exhibit, select the answers that identify what the list will accomplish.

You need to add a line to your IPTables Firewall input chain that will stop any attempts to use the
default install of Back Orifice against hosts on your network (the 10.10.10.0 network). Which of the
following would be the correct command to use?

You have recently taken over the security of a mid-sized network. You are reviewing the current
configuration of the IPTables firewall, and notice the following rule:
ipchains -A output -p TCP -s 10.0.10.0/24 -d 0.0.0.0/0 80 -j ACCEPT
What is the function of this rule?

You have recently taken over the security of a mid-sized network. You are reviewing the current
configuration of the IPTables firewall, and notice the following rule:
ipchains -A input -p TCP -s 0.0.0.0/0 -d 10.0.10.0/24 5000:10000 -j DENY
What is the function of this rule?

After installing Snort on your windows machine that is destined to be your IDS, you need to edit
the configuration files entry of “HOME_NET” to define which of the following?