Quiz — IDS vs IPS
APPLY the verbs, GATE, and YOUR loopback hit-count — not a live-network attack exam.
Ten checks: can you tell a witness from a door, and a lab from a router login?
This quiz is ORIGINAL Cyberlium APPLY — not a vendor cert dump. as YOUR lab app;
APPLY: curl http://192.168.0.1/ shows Netgear “Router Admin.” You wanted an IDS lab. What do you do?
APPLY: A box logs SQLi-looking URIs but still returns 200 to the client. Which verb is it performing?
APPLY: True or False: Binding the teaching IDS toy to 0.0.0.0 is required so signatures can “see the LAN.”
APPLY: Your signature is the string /hit and you curl /hit on YOUR toy. Best description?
APPLY: Anomaly engine has no baseline of YOUR usual curls. What happens?
APPLY: Mute-all is offered as “tuning false positives.” Cyberlium says:
APPLY: Which dest is the Topic 11 IDS lab sensor?
APPLY: A classmate wants ettercap “just to feed the IPS demo.” You:
APPLY: Inline IPS dies open vs dies closed. Why does placement matter?
APPLY: wc -l of t11-m02-hits.log did not increase after curl. First honest check?