Refer to exhibit. Which option is the logical source device for these events?

The correct answer is D. IDS/IPS. Without the exhibit, this answer is determined by the nature of the events described. IDS/IPS (Intrusion Detection/Prevention Systems) are the logical source for security alert events such as signature matches, policy violations, exploit attempts, or anomaly detections. IDS/IPS d

Network Intrusion Analysis

Question

Exhibit

Options

Aweb server
BNetFlow collector
Cproxy server
DIDS/IPS

How the community answered

(18 responses)

A
11% (2)
C
6% (1)
D
83% (15)

Explanation

Without the exhibit, this answer is determined by the nature of the events described. IDS/IPS (Intrusion Detection/Prevention Systems) are the logical source for security alert events such as signature matches, policy violations, exploit attempts, or anomaly detections. IDS/IPS devices inspect traffic in real time and generate structured alert logs tied to specific rules or signatures - the format typically seen in this type of question. A web server (A) logs HTTP requests/responses, a NetFlow collector (B) logs flow metadata (IP, port, byte counts - no deep inspection), and a proxy server (C) logs web browsing activity. Only an IDS/IPS generates the type of intrusion-specific event data presented in the exhibit.

Topics

#IDS/IPS#event analysis#network device identification

Community Discussion

No community discussion yet for this question.

Full 210-255 Practice