Which of the following are advantages of Network Intrusion Detection Systems (NIDS)? (A) Analysis of encrypted traffic (B) Provide insight into network traffic (C) Detection of network operations…

This grouping includes option A (encrypted traffic analysis), which is a well-known NIDS limitation - without decryption capabilities, NIDS cannot inspect payload contents of encrypted sessions such as TLS.

This grouping includes option A (encrypted traffic analysis) as an advantage, which is factually incorrect, and omits option E (cost-effectiveness), which is a recognized benefit of NIDS over HIDS deployments.

Options B (insight into network traffic), D (traffic logs usable in SIEM and forensic workflows), and E (lower cost than host-based solutions since no per-host agents are needed) are genuine NIDS advantages. NIDS passively monitors traffic at strategic network points, making it scalable, economical, and capable of producing logs that feed into broader security architectures.

This grouping also includes option A (encrypted traffic analysis) as an advantage, which is a limitation not a capability, and pairs it with options B and C rather than the correct set.