I’m working on a cyber security test / quiz prep and need an explanation and answer to help me learn.

Q1) What is packet filtering firewall ?

Q2) Briefly explain how a stateful inspection firewall works.

Q3) In your opinion, what is worse (for IDS): having more false-positive intrusion detection or having more false-negative intrusion detections? Briefly explain your answer.

Q4) The phishing detection system demonstrates 98.500% accuracy in attack identification on the testing dataset. The testing dataset includes 15,000 of malicious samples and 985,000 of non-malicious samples. What can you say about this phishing detection system?

Q5) Do Viruses usually embed themselves in the middle of the host code? Briefly explain your answer.

Q6) In your words briefly describe what is phishing attack.

Q7) What is spear phishing?

Q8) Consider a Windows Defender firewall has two similar rules: “Allow incoming traffic from 10.10.10.10” and “Allow Incoming traffic from 10.10.10.10 and port 5050 What rule will be applied? Why?

Q9) What is the difference a virus and a worm?

Q10) Do Polymorphic viruses have a very strong and robust encryption? Briefly explain your answer.