Suspicious traffic without a specific signature was detected. Under further investigation, it was
determined that these were false indicators. Which of the following security devices needs to be
configured to disable future false alarms?

Jane, a security administrator, has observed repeated attempts to break into a server. Which of the
following is designed to stop an intrusion on a specific server?

Which of the following tools will allow a technician to detect security-related TCP connection anomalies?

Which of the following would a security administrator implement in order to identify a problem between
two systems that are not communicating properly?

Which of the following is BEST used to capture and analyze network traffic between hosts on the same
network segment?

Which of the following would a security administrator implement in order to identify a problem between
two applications that are not communicating properly?

Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all
traffic on her network?

Joe, the security administrator, has determined that one of his web servers is under attack. Which of the
following can help determine where the attack originated from?

Which of the following BEST allows Pete, a security administrator, to determine the type, source, and
flags of the packet traversing a network for troubleshooting purposes?

Which of the following security architecture elements also has sniffer functionality? (Select TWO).