What two sensor types exist in an IDS/IPS solution? (Choose two.)

The correct answer is B. anomaly based C. policy based. IDS/IPS solutions use different detection methodologies, and two primary sensor (detection) types are anomaly-based and policy-based. Anomaly-based sensors establish a baseline of normal network behavior and alert on deviations from that baseline - useful for detecting zero-day…

Security Services

Question

Exhibit

Options

Ahost
Banomaly based
Cpolicy based
Dnetwork based
Esignature

How the community answered

(19 responses)

B
89% (17)
D
5% (1)
E
5% (1)

Explanation

IDS/IPS solutions use different detection methodologies, and two primary sensor (detection) types are anomaly-based and policy-based. Anomaly-based sensors establish a baseline of normal network behavior and alert on deviations from that baseline - useful for detecting zero-day attacks or unusual traffic patterns not covered by known signatures. Policy-based sensors enforce explicitly defined security rules (policies), generating alerts when traffic violates those rules regardless of whether a known signature exists. Signature-based detection (option E) is a third distinct type that matches traffic against a database of known attack patterns. Host-based and network-based (options A and D) describe the deployment location of sensors, not the detection methodology - these are sensor placement categories, not sensor types in the detection-method sense.

Topics

#IDS/IPS#anomaly detection#policy-based detection#intrusion detection

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice