nerdexam
GIAC

GSLC · Question #329

Which of the following is used to detect malicious activity such as port scans or even attempts for cracking into computers by monitoring network traffic?

The correct answer is B. NIDS. A Network Intrusion Detection System (NIDS) monitors network traffic to identify malicious activity such as port scans and unauthorized access attempts.

Security Operations & Incident Response Leadership

Question

Which of the following is used to detect malicious activity such as port scans or even attempts for cracking into computers by monitoring network traffic?

Options

  • AIIPS
  • BNIDS
  • CPIDS
  • DHIDS

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    88% (29)
  • C
    6% (2)
  • D
    3% (1)

Why each option

A Network Intrusion Detection System (NIDS) monitors network traffic to identify malicious activity such as port scans and unauthorized access attempts.

AIIPS

IIPS is not a recognized standard security acronym and does not represent a real intrusion detection or prevention category.

BNIDSCorrect

NIDS (Network Intrusion Detection System) passively analyzes packets traversing the network in real time, comparing traffic patterns against known attack signatures to detect threats like port scans, DoS attempts, and brute-force logins. It operates at the network level and can monitor traffic for all hosts on a segment simultaneously, making it the correct tool for the described scenario.

CPIDS

PIDS is not a standard or widely recognized classification within intrusion detection systems relevant to this scenario.

DHIDS

HIDS (Host-based Intrusion Detection System) monitors activity on a single endpoint such as log files and system calls, not network traffic.

Concept tested: Network Intrusion Detection System (NIDS) function

Source: https://csrc.nist.gov/publications/detail/sp/800-94/final

Topics

#NIDS#intrusion detection#network monitoring#port scanning

Community Discussion

No community discussion yet for this question.

Full GSLC Practice