2.5 Explain the Limitations of Signature-Based Network Protection CYBERSECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   Why is threat intelligence considered a complementary measure to signature-based protection?

   • AIt provides real-time information about emerging threats that can be used to update defenses
   • BIt replaces the need for signature-based detection entirely
   • CIt automatically patches all software vulnerabilities
   • DIt encrypts all network traffic to prevent attacks
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which technique involves splitting malicious payload across multiple packets to avoid detection?

   • AFragmentation
   • BEncryption
   • CProtocol tunneling
   • DObfuscation
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security architect is designing a defense-in-depth strategy. They are concerned about a zero-day exploit that uses a never-before-seen attack vector. They know their signature-based IPS will not catch this on day one. Which complementary approach would best address this specific gap?

   • ADeploying more signatures from a different vendor
   • BEnabling SSL decryption on the firewall
   • CIncreasing the IPS inspection buffer size
   • DImplementing behavioral analysis and anomaly detection
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which type of attack is most likely to evade signature-based network protection?

   • AA zero-day exploit that has never been seen before
   • BAn attack using a well-known port and protocol
   • CA brute-force attack that uses a common password list
   • DA known malware variant that has been widely reported
   Reveal Solution Discussion Select an answer first