A signature-based intrusion detection system (SIDS)
monitors all the packets traversing the network and compares them against a database of attack signatures or attributes of known malicious threats, much like antivirus software.
Which of the following is found in the intermediate distribution frame and is used to terminate cabling coming from the work area?
Which of the following is found in the intermediate distribution frame and is used to terminate cabling coming from the work area?
Patch panels
are found in the intermediate distribution frame (IDF).
Which layer of the OSI model should you examine if you want to troubleshoot a problem with the HTTP protocol?
The application layer
is where all the client-server and service-related applications, such as SMTP, HTTP, POP3, FTP, are used. It is also the layer where you will often find DNS-related issues. Most of the network issues related to DNS functionality can be fixed using the “nslookup” command.
What type of address uses 12 hexadecimal digits?
MAC Address
is a 12-digit hexadecimal number (6-Byte binary number), which is mostly represented by Colon-Hexadecimal notation. First 6-digits (say 00:40:96) of MAC Address identifies the manufacturer, called as OUI (Organizational Unique Identifier).
Which device uses CSMA CD when the interface is set to half duplex mode?
CSMA/CD is commonly used in networks with
repeaters and hubs
because these devices run in the half-duplex mode and all of their ports are in the same collision domain. Packet collisions occur when packets are transmitted from different host at the same time.
What are the two main types of intrusion detection systems?
Intrusion detection systems primarily use two key intrusion detection methods:
signature-based intrusion detection and anomaly-based intrusion detection
. Signature-based intrusion detection is designed to detect possible threats by comparing given network traffic and log data to existing attack patterns.
What type of device can be used to block unwanted traffic?
A firewall
is a security device in the form of computer hardware or software. It can help protect your network by acting as an intermediary between your internal network and outside traffic. It monitors attempts to gain access to your operating system and blocks unwanted incoming traffic and unrecognized sources.
What is difference between IDF and MDF?
MDF – main distribution frame, a cable rack that interconnects and manages the IT and/or telecommunications wiring between itself and any number of IDFs. IDF- intermediate distribution frame, a cable rack that interconnects and manages the IT and/or telecommunications wiring between an MDF and workstation devices.
How does Main Distribution Frame Work?
The MDF
connects equipment inside a telecommunications facility to cables and subscriber carrier equipment
. Every cable that supplies services to user telephones lines ends up at an MDF and is distributed through MDF to equipment within local exchanges.
Which protocol can you use to remotely manage a network switch?
Telnet
is a network management protocol, through which an administrator or another user can access someone else’s computer remotely. This method is applicable to the remote management of the switch which has been configured with IP address (default 192.168. 1.1) and user account with the administration authority.
What is Unicast MAC address?
A unicast MAC address is
a unique address that is used when a frame is sent from a single transmitting device to a single destination device
. In Figure 7-11, the destination MAC address and the destination IP address are both unicast. A host with IPv4 address 192.168.
What does MAC address look like?
The MAC address is a 12 digit hexadecimal number that is
most often displayed with a colon or hypen separating every two digits (an octet)
, making it easier to read. Example: A MAC address of 2c549188c9e3 is typically displayed as 2C:54:91:88:C9:E3 or 2c-54-91-88-c9-e3.
What does MAC address tell you?
MAC Address or media access control address is a unique ID assigned to network interface cards (NICs). It is also known as a physical or hardware address. It
identifies the hardware manufacturer
and is used for network communication between devices in a network segment.
Is CSMA CD still used?
CSMA/CD is used for any half-duplex link. Short answer:
The support is still present
but it is generally only used when legacy equipment is connected, either hubs or very old (or embedded) network interfaces that operate at 10Mbps only and do not support autonegotiation.
Does full-duplex double the bandwidth?
In full-duplex mode,
two directly connected devices can send and receive data at the same time
, doubling the bandwidth.
What is the purpose of CSMA CD?
CSMA/CD is used
to improve CSMA performance by terminating transmission as soon as a collision is detected
, thus shortening the time required before a retry can be attempted.
