You are building the rules for your newly installed ISA Server 2006. There are three basic rule
types:
Access rules, Publishing rules, and Network rules. Which of the following best describes Access
rules and Publishing rules?

ISA Server 2006 features extensive rule matching abilities. Which of the following lists has the
proper order for how ISA Server 2006 checks rule elements that make up an Access rule?

You have made some changes to the configuration of your ISA Server 2006 firewall. While
analyzing the network traffic, you see that these changes have not yet taken affect. What must you
do to get these new rules to take function?

What is the order of the defensive layers a cracker would have to compromise when attacking a
properly secured network?

You are configuring your new Intrusion Detection System, and studying the true-false matrix. You
read about the different types of alarms and events. Which of the following defines an event where
an alarm is indicating an intrusion when there is no actual intrusion?

As you increase the layers of security in your organization you must watch the network behavior
closely.
What kind of problems can an improperly configured IDS cause in your network?

You are considering adding layers to your authentication system currently in place. Reading
through some of the vendor literature on logon solutions, it frequently mentions two and three
factor authentication. Your assistant asks you what the difference between the two is. Select the
options that correctly describe two-factor and three-factor authentication:

You have just found a user who has performed an improper utilization of resources inside the
organization both intentionally and unintentionally. This user has just provided you with a working
example of which of the following?

The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Independent Audit and are describing it to your
coworkers. Which of the following best describes an Independent audit?

You have been hired at a large company to manage network security issues. Prior to your arrival,
there was no one dedicated to security, so you are starting at the beginning. You hold a meeting
and are discussing the main functions and features of network security. One of your assistants
asks what the function of Authentication in network security is. Which of the following best
describes Authentication?