As you increase the layers of security in your organization you must watch the network behavior
closely.
What kind of problems can an improperly configured IDS cause in your network?

You are considering adding layers to your authentication system currently in place. Reading
through some of the vendor literature on logon solutions, it frequently mentions two and three
factor authentication. Your assistant asks you what the difference between the two is. Select the
options that correctly describe two-factor and three-factor authentication:

You have just found a user who has performed an improper utilization of resources inside the
organization both intentionally and unintentionally. This user has just provided you with a working
example of which of the following?

You have been hired at a large company to manage network. Prior to your arrival, there was no
one dedicated to security, so you are starting at the beginning. You hold a meeting and are
discussing the main functions and features of network security. One of your assistants asks what
the function of Integrity in network security is. Which of the following best describes Integrity?

During your packet capture of traffic to check if your network is getting hit by a Denial of Service
attack, you analyze TCP headers. You notice there are many headers that seem to have the same
SEQ number, with the responding computer using different SEQ and ACK numbers in response. If
you are analyzing a normal three-way handshake between two Windows 2000 nodes, and the first
packet has a SEQ of
0xD36077AF, what will the responding computer use as an ACK?

The exhibit shows the partial contents of a Network Monitor capture on a Windows 2000 FTP Server.
Each line represents information pertaining to a frame. What is the sequence number used by
TCP for the second part of the three way handshake?

During a security review of the network it is decided to run a full packet capture over a 24 hour
period and log the packets for analysis. You have been chosen to analyze all the TCP packets. To
prepare you study the RFC for TCP and have identified all the parts of the TCP header. Which of
the following are parts of the TCP header?

You are running a packet sniffer on your network and capture the TFTP transfer shown in the
image. A co-worker leans over your shoulder and asks what the value of the circled byte stands
for. You tell him it identifies the IP Protocol known as?

It is a given that two computers that communicate using TCP/IP as the protocol must use valid
addresses and media to do so. What combination of the following is required to create a TCP/IP
socket?

In an ICMP Message, what is the function of the first eight bits?