What is the purpose of AIDE?

The correct answer is B. To detect intrusions and system changes. AIDE (Advanced Intrusion Detection Environment) is a host-based intrusion detection system that creates a database of file checksums and attributes, then compares the current system state against that baseline to detect unauthorized changes - making B correct. Option A is wrong…

Host Security

Question

Options

ATo manage system log files
BTo detect intrusions and system changes
CTo manage installed packages
DTo automate host scans

How the community answered

(58 responses)

A
2% (1)
B
95% (55)
C
3% (2)

Explanation

AIDE (Advanced Intrusion Detection Environment) is a host-based intrusion detection system that creates a database of file checksums and attributes, then compares the current system state against that baseline to detect unauthorized changes - making B correct. Option A is wrong because log management is handled by tools like logrotate or rsyslog, not AIDE. Option C is wrong because package management is the role of tools like apt, yum, or dnf. Option D is wrong because automated host scanning is the domain of tools like Nessus or OpenVAS.

Memory tip: Think of AIDE as a snapshot guard - it takes a picture of your system and raises an alarm when anything changes. "AIDE watches for changes" links the acronym to its core purpose.

Topics

#AIDE#File Integrity Monitoring#Intrusion Detection#Change Detection

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice