GSEC · Question #30
Which of the following is an advantage of an Intrusion Detection System?
The correct answer is A. It is a mature technology.. IDS is a mature, well-established technology with decades of development, making proven stability its primary advantage over newer, less battle-tested approaches.
Question
Which of the following is an advantage of an Intrusion Detection System?
Options
- AIt is a mature technology.
- BIt is the best network security.
- CIt never needs patching.
- DIt is a firewall replacement.
How the community answered
(40 responses)- A78% (31)
- B13% (5)
- C3% (1)
- D8% (3)
Why each option
IDS is a mature, well-established technology with decades of development, making proven stability its primary advantage over newer, less battle-tested approaches.
IDS technology has been actively developed and refined since the late 1980s, producing established detection methodologies, signature databases, and broad vendor support; this maturity means it has a known track record, documented limitations, and well-understood deployment patterns that organizations can rely on.
IDS is not the best network security - it is detection-only, generates false positives, and has significant blind spots such as encrypted traffic.
IDS systems require regular patching and signature updates like any software, and unpatched IDS can itself become a vulnerability.
IDS cannot replace a firewall because it only detects and alerts; it does not actively filter or block malicious traffic.
Concept tested: Intrusion Detection System advantages and limitations
Source: https://csrc.nist.gov/publications/detail/sp/800-94/final
Topics
Community Discussion
No community discussion yet for this question.