GSLC · Question #434
IDS systems can be classified in many different ways. Which of the following is not a way that IDS systems are commonly classified?
The correct answer is A. Latent. IDS systems are commonly classified as network-based, host-based, passive, or active - 'latent' is not a recognized IDS classification category.
Question
IDS systems can be classified in many different ways. Which of the following is not a way that IDS systems are commonly classified?
Options
- ALatent
- BNetwork Based
- CPassive
- DActive
- EHost Based
How the community answered
(28 responses)- A89% (25)
- D4% (1)
- E7% (2)
Why each option
IDS systems are commonly classified as network-based, host-based, passive, or active - 'latent' is not a recognized IDS classification category.
The term 'latent' is not a standard classification for IDS systems. It does not correspond to any recognized taxonomy used in intrusion detection. The four established classification types are based on detection location (network-based vs. host-based) and response behavior (passive vs. active), making 'latent' the answer that does not belong.
Network-based IDS (NIDS) is a standard classification referring to systems that monitor network traffic across segments.
Passive IDS is a standard classification describing systems that detect and alert without taking automated action.
Active IDS is a standard classification describing systems that both detect intrusions and respond automatically, such as by blocking traffic.
Host-based IDS (HIDS) is a standard classification referring to systems that monitor activity on individual host machines.
Concept tested: IDS classification categories and terminology
Source: https://csrc.nist.gov/publications/detail/sp/800-94/final
Topics
Community Discussion
No community discussion yet for this question.