nerdexam
EC-Council

312-38 · Question #14

Which of the following is an intrusion detection system that monitors and analyzes the internals of a computing system rather than the network packets on its external interfaces?

The correct answer is B. HIDS. HIDS (Host-based Intrusion Detection System) monitors and analyzes the internals of a computing system - examining log files, system calls, file integrity, and running processes - rather than network traffic, making B the correct answer. Why the others are wrong: A. IPS…

Network Security Controls, Protocols, and Devices

Question

Which of the following is an intrusion detection system that monitors and analyzes the internals of a computing system rather than the network packets on its external interfaces?

Options

  • AIPS
  • BHIDS
  • CDMZ
  • DNIDS

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    90% (36)
  • C
    5% (2)
  • D
    3% (1)

Explanation

HIDS (Host-based Intrusion Detection System) monitors and analyzes the internals of a computing system - examining log files, system calls, file integrity, and running processes - rather than network traffic, making B the correct answer.

Why the others are wrong:

  • A. IPS (Intrusion Prevention System) - not just detection; it actively blocks threats, and typically operates at the network level
  • C. DMZ (Demilitarized Zone) - a network architecture concept (a segmented subnet), not an intrusion detection system at all
  • D. NIDS (Network-based Intrusion Detection System) - the opposite of HIDS; it inspects network packets on external interfaces rather than host internals

Memory tip: Think HIDS = Host (the machine itself), NIDS = Network (the wire). If the question says "internals of a computing system," that's the host - go with HIDS.

Topics

#HIDS#Intrusion Detection#Host-based monitoring#IDS types

Community Discussion

No community discussion yet for this question.

Full 312-38 Practice