EC-Council
312-50V11 · Question #288
312-50V11 Question #288: Real Exam Question with Answer & Explanation
The correct answer is A: An attacker, working slowly enough, can evade detection by the IDS.. See the full explanation below for the reasoning.
Question
The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?
Options
- AAn attacker, working slowly enough, can evade detection by the IDS.
- BNetwork packets are dropped if the volume exceeds the threshold.
- CThresholding interferes with the IDS' ability to reassemble fragmented packets.
- DThe IDS will not distinguish among packets originating from different sources.
Community Discussion
No community discussion yet for this question.