nerdexam
CompTIA

FC0-U41 · Question #152

Which of the following indicates the subjects that can use them?

The correct answer is A. Access control list. Access control list indicates what subjects can use them. Access Control List (ACL) is the most commonly used object in Cisco IOS. It filters packets or network traffic by controlling whether routed packets are forwarded or blocked at the router's interfaces. According to the…

Security Fundamentals

Question

Which of the following indicates the subjects that can use them?

Options

  • AAccess control list
  • BAudit policy
  • CIntrusion detection system
  • DSingle sign-on

How the community answered

(30 responses)
  • A
    77% (23)
  • B
    3% (1)
  • C
    7% (2)
  • D
    13% (4)

Explanation

Access control list indicates what subjects can use them. Access Control List (ACL) is the most commonly used object in Cisco IOS. It filters packets or network traffic by controlling whether routed packets are forwarded or blocked at the router's interfaces. According to the criteria specified within the access lists, router determines whether the packets to be forwarded or dropped. Access control list criteria could be the source or destination address of the traffic or other information. The types of Cisco ACLs are Standard IP, Extended IP, IPX, Answer option B is incorrect. Audit policy defines the type of security events that will be logged for the servers of a domain or for an individual computer. It does not indicate what subjects can use Answer option C is incorrect. An Intrusion detection system (IDS) is software and/or hardware designed to detect unwanted attempts at accessing, manipulating, and/or disabling of computer systems, mainly through a network, such as the Internet. These attempts may take the form of attacks, as examples, by crackers, malware and/or disgruntled employees. An IDS cannot directly detect attacks within properly encrypted traffic. An intrusion detection system is used to detect several types of malicious behaviors that can compromise the security and trust of a computer system. This includes network attacks against vulnerable services, data driven attacks on applications, host based attacks such as privilege escalation, unauthorized logins and access to sensitive files, and malware (viruses, trojan horses, and worms). Answer option D is incorrect. Single sign-on is a process that enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in the domain without being prompted to log in again.

Topics

#access control list#ACL#permissions#subjects

Community Discussion

No community discussion yet for this question.

Full FC0-U41 Practice