System Administrator 2026
Attempt This Past Paper
At which two traffic layers do most commercial IDSes generate signatures?
  • A. Application layer and network layer
  • B. Network layer and session layer
  • C. Transport layer and application layer
  • D. Transport layer and network layer
IDS follows a two-step process consisting of a passive component and an active component. Which of the following is part of the active component?
  • A. Inspection of password files to detect inadvisable passwords
  • B. Mechanisms put in place to reenact known methods of attack and record system responses
  • C. Inspection of system to detect policy violations
  • D. Inspection of configuration files to detect inadvisable settings
“Semantics-aware” signatures automatically generated by Nemean are based on traffic at which two layers?
  • A. Application layer and transport layer
  • B. Network layer and application layer
  • C. Session layer and transport layer
  • D. Application layer and session layer
Which of the following is used to provide a baseline measure for comparison of IDSes?
  • A. Crossover error rate
  • B. False negative rate
  • C. False positive rate
  • D. Bit error rate
Which of the following is true of signature-based IDSes?
  • A. They alert administrators to deviations from €?normal” traffic behavior
  • B. They identify previously unknown attacks
  • C. The technology is mature and reliable enough to use on production networks
  • D. They scan network traffic or packets to identify matches with attack-definition files
The PPP protocol _________
  • A. Is designed for simple links which transport packets between two peers
  • B. Is one of the protocols for making an internet connection over a phone line
  • C. Is designed for simple links which transport packets between two peers and making an internet connection over a phone line
  • D. Is used for sharing bandwidth
PPP provides the _______ layer in the TCP/IP suite.
  • A. Link
  • B. Network
  • C. Transport
  • D. Application
PPP consists of ________components
  • A. Three (encapsulating, the domain name system)
  • B. Three (encapsulating, a link control protocol, ncp)
  • C. Two (a link control protocol, simple network control protocol)
  • D. One (simple network control protocol)