nerdexam
(ISC)2

CSSLP · Question #89

Which of the following types of signatures is used in an Intrusion Detection System to trigger on attacks that attempt to reduce the level of a resource or system, or to cause it to crash?

The correct answer is C. DoS. DoS (Denial of Service) signatures in an Intrusion Detection System are designed to identify and trigger on attacks aimed at depleting system resources or causing service disruptions.

Secure Software Deployment, Operations, Maintenance

Question

Which of the following types of signatures is used in an Intrusion Detection System to trigger on attacks that attempt to reduce the level of a resource or system, or to cause it to crash?

Options

  • AAccess
  • BBenign
  • CDoS
  • DReconnaissance

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    93% (26)

Why each option

DoS (Denial of Service) signatures in an Intrusion Detection System are designed to identify and trigger on attacks aimed at depleting system resources or causing service disruptions.

AAccess

Access signatures typically detect unauthorized attempts to gain entry or escalate privileges on a system.

BBenign

"Benign" is not a type of IDS signature; it refers to harmless activity.

CDoSCorrect

DoS (Denial of Service) signatures are specifically crafted to detect patterns of activity associated with attacks intended to overwhelm system resources, exploit vulnerabilities leading to crashes, or otherwise disrupt the availability of a service or system. These signatures look for anomalies like unusually high traffic from a single source or malformed packets designed to exploit service weaknesses.

DReconnaissance

Reconnaissance signatures identify attempts to gather information about a target system, such as port scans or vulnerability probes, rather than direct attacks to crash or deplete resources.

Concept tested: IDS Signature Types - DoS

Topics

#Intrusion Detection Systems#DoS Attacks#Security Signatures#Operational Security

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice