nerdexam
GIAC

GCFA · Question #217

Which of the following components are usually found in an Intrusion detection system (IDS)? Each correct answer represents a complete solution. Choose two.

The correct answer is A. Sensor. An IDS is built around sensors that monitor traffic and a console for managing alerts and administration.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following components are usually found in an Intrusion detection system (IDS)? Each correct answer represents a complete solution. Choose two.

Options

  • ASensor
  • BFirewall
  • CModem
  • DGateway
  • EConsole

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    3% (1)
  • C
    10% (3)
  • D
    3% (1)
  • E
    3% (1)

Why each option

An IDS is built around sensors that monitor traffic and a console for managing alerts and administration.

ASensorCorrect

Sensors are a fundamental architectural component of any IDS, deployed at network chokepoints or on hosts to capture and analyze traffic for known attack signatures or anomalous behavior. They perform the core detection function by forwarding events to a central management or console component for review and response.

BFirewall

A firewall is an access control device that filters traffic based on predefined rules, serving a preventive function rather than a detection function within an IDS.

CModem

A modem is a signal modulation/demodulation device used to establish communication links and has no role in intrusion detection architecture.

DGateway

A gateway is a network device that bridges different protocols or network segments and is not a component of IDS architecture.

EConsole

A console is actually a recognized IDS component used by administrators to view and manage alerts; however, the provided answer key designates only A as correct for this question.

Concept tested: Intrusion detection system core architectural components

Source: https://www.cisco.com/c/en/us/products/security/intrusion-detection-system-ids/index.html

Topics

#IDS components#intrusion detection#sensor#console

Community Discussion

No community discussion yet for this question.

Full GCFA Practice