nerdexam
EC-Council

312-50V13 · Question #179

Which of the following statements is FALSE with respect to Intrusion Detection Systems?

The correct answer is B. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic. The false statement about Intrusion Detection Systems (IDS) is that they can easily distinguish a malicious payload in encrypted traffic, as encryption significantly obstructs their ability to inspect content.

Submitted by renata2k· Mar 6, 2026Evading IDS, Firewalls, and Honeypots

Question

Which of the following statements is FALSE with respect to Intrusion Detection Systems?

Options

  • AIntrusion Detection Systems can be configured to distinguish specific content in network packets
  • BIntrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic
  • CIntrusion Detection Systems require constant update of the signature library
  • DIntrusion Detection Systems can examine the contents of the data n context of the network

How the community answered

(27 responses)
  • A
    7% (2)
  • B
    89% (24)
  • C
    4% (1)

Why each option

The false statement about Intrusion Detection Systems (IDS) is that they can easily distinguish a malicious payload in encrypted traffic, as encryption significantly obstructs their ability to inspect content.

AIntrusion Detection Systems can be configured to distinguish specific content in network packets

This is true; rule-based or signature-based IDS are designed to examine packet content for malicious patterns.

BIntrusion Detection Systems can easily distinguish a malicious payload in an encrypted trafficCorrect

Intrusion Detection Systems primarily rely on inspecting network packet payloads or host activities for signatures or anomalies. When network traffic is encrypted (e.g., HTTPS, VPNs), the payload contents are unreadable to the IDS unless it sits at a decryption point or has access to the decryption keys, thus an IDS cannot easily distinguish or inspect malicious payloads within such traffic.

CIntrusion Detection Systems require constant update of the signature library

This is true; signature-based IDS require frequent updates to their signature libraries to detect new and evolving threats.

DIntrusion Detection Systems can examine the contents of the data n context of the network

This is true; Network-based IDS (NIDS) specifically monitor network traffic, examining data to identify suspicious activity within the network context.

Concept tested: IDS limitations with encrypted traffic

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/intrusion-detection-system

Topics

#IDS#Encrypted traffic#Network security#Intrusion Detection Systems

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice