{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

What are the three main detection methods used in cybersecurity tools?

A. Firewall-based, VPN-based, and SIEM-based

B. Signature-based, anomaly-based, and hybrid detection

C. Manual, automated, and encrypted detection

D. MAC-based, IP-based, and protocol-based detection

1

What does signature-based detection rely on to identify threats?

A. Beacon frames

B. MAC filtering

C. A database of known indicators of compromise (IoCs)

D. Wireless encryption protocols

1

What is a major limitation of signature-based detection?

A. It generates too many false positives

B. It only works on wireless networks

C. It requires manual review of all traffic

D. It cannot detect new, previously unknown attacks

1

What is baselining in the context of anomaly-based detection?

A. Encrypting all network traffic

B. Creating a statistical model of expected network behavior

C. Blocking all unknown devices

D. Filtering traffic based on MAC addresses

1

What is a potential risk of baselining if a network is already compromised during the baseline period?

A. Malicious behavior may be treated as normal

B. The system will crash

C. The baseline will be too strict

D. The firewall will block all traffic

1

What is a key advantage of anomaly-based detection over signature-based detection?

A. It requires less processing power

B. It can detect previously unknown attacks

C. It generates fewer alerts

D. It uses MAC filtering

1

What is a drawback of anomaly-based detection?

A. It cannot detect new attacks

B. It requires no baseline

C. It only works with signature databases

D. It often generates more false positives

1

What does hybrid detection combine?

A. VPN and firewall rules

B. Signature-based and anomaly-based detection

C. MAC filtering and port security

D. Baselining and encryption

1

What is alert fatigue?

A. When security personnel become desensitized due to frequent false positives

B. When a system stops sending alerts

C. When a firewall blocks too many alerts

D. When a SIEM system fails to collect logs

1

A detection tool flags traffic that matches a known pattern associated with a specific type of malware. What type of detection method is being used?

A. Anomaly-based

B. Hybrid

C. Signature-based

D. Baselining

1

A detection system identifies unusual traffic patterns that differ from normal and raises an alert. What type of detection is this?

A. Signature-based

B. Anomaly-based

C. MAC-based

D. Protocol-based

1

A company uses a detection system that can identify both known and unknown threats but requires significant processing power and generates many alerts. What type of system is this?

A. Signature-based

B. Anomaly-based

C. Hybrid detection

D. Baselining tool

AP Cybersecurity: 3.5B - Formative Assessment Questions

AP Cybersecurity: 3.5B - Formative Assessment Questions

What are the three main detection methods used in cybersecurity tools?

What does signature-based detection rely on to identify threats?

What is a major limitation of signature-based detection?

What is baselining in the context of anomaly-based detection?

What is a potential risk of baselining if a network is already compromised during the baseline period?

What is a key advantage of anomaly-based detection over signature-based detection?

What is a drawback of anomaly-based detection?

What does hybrid detection combine?

What is alert fatigue?

A detection tool flags traffic that matches a known pattern associated with a specific type of malware. What type of detection method is being used?

A detection system identifies unusual traffic patterns that differ from normal and raises an alert. What type of detection is this?

A company uses a detection system that can identify both known and unknown threats but requires significant processing power and generates many alerts. What type of system is this?

What are the three main detection methods used in cybersecurity tools?

What does signature-based detection rely on to identify threats?

What is a major limitation of signature-based detection?

What is baselining in the context of anomaly-based detection?

What is a potential risk of baselining if a network is already compromised during the baseline period?

What is a key advantage of anomaly-based detection over signature-based detection?

What is a drawback of anomaly-based detection?

What does hybrid detection combine?

What is alert fatigue?

A detection tool flags traffic that matches a known pattern associated with a specific type of malware. What type of detection method is being used?

A detection system identifies unusual traffic patterns that differ from normal and raises an alert. What type of detection is this?

A company uses a detection system that can identify both known and unknown threats but requires significant processing power and generates many alerts. What type of system is this?