312-38 · Question #14
Which of the following is an intrusion detection system that monitors and analyzes the internals of a computing system rather than the network packets on its external interfaces?
The correct answer is B. HIDS. HIDS (Host-based Intrusion Detection System) monitors and analyzes the internals of a computing system - examining log files, system calls, file integrity, and running processes - rather than network traffic, making B the correct answer. Why the others are wrong: A. IPS…
Question
Options
- AIPS
- BHIDS
- CDMZ
- DNIDS
How the community answered
(40 responses)- A3% (1)
- B90% (36)
- C5% (2)
- D3% (1)
Explanation
HIDS (Host-based Intrusion Detection System) monitors and analyzes the internals of a computing system - examining log files, system calls, file integrity, and running processes - rather than network traffic, making B the correct answer.
Why the others are wrong:
- A. IPS (Intrusion Prevention System) - not just detection; it actively blocks threats, and typically operates at the network level
- C. DMZ (Demilitarized Zone) - a network architecture concept (a segmented subnet), not an intrusion detection system at all
- D. NIDS (Network-based Intrusion Detection System) - the opposite of HIDS; it inspects network packets on external interfaces rather than host internals
Memory tip: Think HIDS = Host (the machine itself), NIDS = Network (the wire). If the question says "internals of a computing system," that's the host - go with HIDS.
Topics
Community Discussion
No community discussion yet for this question.