If you are physically examining the office where your WLAN is configured, what are you performing?
Answer : D
In your organization a decision has been made to implement a multicasting application. You are configuring your firewall to allow this application to flow through in both directions. What address range are you going to address on the firewall?
Answer : D
You have been working with Snort, on your Windows Server 2003, for sometime as a packet capture tool, and now wish to connect Snort to a database on your server. You install MySQL as the database, and are ready to configure Snort. If the database is named: snortdb1, has a user name of: snort, and a password of: snortpass, what is the configuration line you need to add to Snort?
Answer : E
You are going to configure your SuSe Linux machine to run Snort, as the IDS in your network. In order to take full advantage of Snort, you have read that you need a LAMP Server. What are the components of a LAMP Server?
Answer : A
You need to diagram wireless security options for your team during a planning meeting. What wireless

Answer : B
During the configuration of your newly installed ISA Server 2006, you are creating new rules. Which three of the following answers are used to create a protocol rule in ISA Server 2006?
Answer : B, D, E
You are reviewing the IDS logs and during your analysis you notice a user account that had attempted to log on to your network ten times one night between 3 and 4 AM. This is quite different from the normal pattern of this user account, as this user is only in the office from 8AM to 6PM. Had your IDS detected this anomaly, which of the following types of detection best describes this event?
Answer : D