Which of the following has been used to evade IDS and IPS?

The correct answer is A. Fragmentation. Fragmentation is a technique used by attackers to evade detection by Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). By breaking down packets into smaller fragments, attackers can make it more difficult for these security systems to detect malicious…

Incident Handling and Response Technologies

Question

Options

AFragmentation
BTNP
CHTTP
DSNMP

How the community answered

(36 responses)

A
92% (33)
B
6% (2)
C
3% (1)

Explanation

Fragmentation is a technique used by attackers to evade detection by Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). By breaking down packets into smaller fragments, attackers can make it more difficult for these security systems to detect malicious payloads or signature-based patterns associated with known attacks. This method exploits the fact that some IDS/IPS solutions may not properly reassemble packet fragments for analysis, thereby allowing malicious fragments to pass through undetected.

Topics

#IDS evasion#IPS evasion#fragmentation#network attacks

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice