GCIA · Question #92
Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?
The correct answer is B. Intrusion detection system (IDS). This question identifies which security technology is specifically designed to detect unauthorized access attempts against computer systems, both locally and over a network.
Question
Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?
Options
- ADemilitarized zone (DMZ)
- BIntrusion detection system (IDS)
- CFirewall
- DPacket filtering
How the community answered
(43 responses)- A5% (2)
- B72% (31)
- C16% (7)
- D7% (3)
Why each option
This question identifies which security technology is specifically designed to detect unauthorized access attempts against computer systems, both locally and over a network.
A DMZ is a network architecture segment that isolates public-facing services from the internal network but does not itself detect unauthorized access attempts.
An Intrusion Detection System (IDS) is purpose-built to monitor network traffic and system activity for signs of unauthorized access, misuse, or policy violations. It analyzes events in real time or near-real time and generates alerts when suspicious patterns are detected. Unlike preventive controls, an IDS focuses on detection and notification, covering both local and remote (Internet/intranet) attack vectors.
A firewall enforces access control rules by blocking or permitting traffic but does not analyze behavior to detect intrusion attempts beyond rule matching.
Packet filtering is a firewall technique that inspects packet headers against static rules and does not perform behavioral or anomaly-based intrusion detection.
Concept tested: Intrusion detection system purpose and scope
Source: https://www.cisco.com/c/en/us/products/security/intrusion-detection-system/index.html
Topics
Community Discussion
No community discussion yet for this question.