CERTIFIED-IN-CYBERSECURITY · Question #773
Which type of Intrusion Detection Systems (IDS) and Intrusion Prevention System (IPS) are completely vulnerable to 0-day attacks?
The correct answer is A. Signature based. Signature-based IDS/IPS work by matching traffic or behavior against a database of known attack signatures. A zero-day attack is, by definition, one that has never been seen before - so no signature exists for it, and the system cannot detect it. Heuristic and behavioral-based…
Question
Which type of Intrusion Detection Systems (IDS) and Intrusion Prevention System (IPS) are completely vulnerable to 0-day attacks?
Options
- ASignature based.
- BNetwork based.
- CHeuristic based.
- DBehavioral based.
How the community answered
(52 responses)- A90% (47)
- B2% (1)
- C2% (1)
- D6% (3)
Explanation
Signature-based IDS/IPS work by matching traffic or behavior against a database of known attack signatures. A zero-day attack is, by definition, one that has never been seen before - so no signature exists for it, and the system cannot detect it. Heuristic and behavioral-based systems can potentially detect zero-days because they analyze patterns and anomalies rather than matching known signatures. Network-based describes the deployment location, not the detection method.
Topics
Community Discussion
No community discussion yet for this question.