A company is using an intrusion detection and prevention system (IDPS) to scan and analyze intrusion events. Which IDPS technique uses a database that contains known attack patterns?

The correct answer is C. Signature-based. Signature-based IDPS systems use a database of known attack signatures to detect malicious activity. These signatures are typically based on patterns of network traffic that are associated with specific attacks. When the IDPS detects a signature in the network traffic, it…

Security

Question

Options

ARole-based
BProfile-based
CSignature-based
DAnomaly-based

How the community answered

(55 responses)

A
7% (4)
B
2% (1)
C
78% (43)
D
13% (7)

Explanation

Signature-based IDPS systems use a database of known attack signatures to detect malicious activity. These signatures are typically based on patterns of network traffic that are associated with specific attacks. When the IDPS detects a signature in the network traffic, it alerts the Signature-based IDPS systems are effective at detecting known attacks, but they are not as effective at detecting new or unknown attacks. This is because the database of signatures needs to be updated regularly with new attack signatures.

Topics

#IDPS#signature-based detection#intrusion detection#attack patterns

Community Discussion

No community discussion yet for this question.

Full DEA-1TT5 Practice