nerdexam
GIAC

GSLC · Question #434

IDS systems can be classified in many different ways. Which of the following is not a way that IDS systems are commonly classified?

The correct answer is A. Latent. IDS systems are commonly classified as network-based, host-based, passive, or active - 'latent' is not a recognized IDS classification category.

Security Architecture & Engineering

Question

IDS systems can be classified in many different ways. Which of the following is not a way that IDS systems are commonly classified?

Options

  • ALatent
  • BNetwork Based
  • CPassive
  • DActive
  • EHost Based

How the community answered

(28 responses)
  • A
    89% (25)
  • D
    4% (1)
  • E
    7% (2)

Why each option

IDS systems are commonly classified as network-based, host-based, passive, or active - 'latent' is not a recognized IDS classification category.

ALatentCorrect

The term 'latent' is not a standard classification for IDS systems. It does not correspond to any recognized taxonomy used in intrusion detection. The four established classification types are based on detection location (network-based vs. host-based) and response behavior (passive vs. active), making 'latent' the answer that does not belong.

BNetwork Based

Network-based IDS (NIDS) is a standard classification referring to systems that monitor network traffic across segments.

CPassive

Passive IDS is a standard classification describing systems that detect and alert without taking automated action.

DActive

Active IDS is a standard classification describing systems that both detect intrusions and respond automatically, such as by blocking traffic.

EHost Based

Host-based IDS (HIDS) is a standard classification referring to systems that monitor activity on individual host machines.

Concept tested: IDS classification categories and terminology

Source: https://csrc.nist.gov/publications/detail/sp/800-94/final

Topics

#IDS classification#network-based IDS#host-based IDS#active vs passive IDS

Community Discussion

No community discussion yet for this question.

Full GSLC Practice