You are concerned about an attacker being able to get into your network. You want to make sure that you are informed of any network activity that is outside normal parameters. What is the best way…

The correct answer is D. Implement an anomaly based IDS. An anomaly based Intrusion Detection System will monitor the network for any activity that is outside normal parameters (i.e. an anomaly) and inform you of it. Answer: C is incorrect. Antivirus software, while important, won't help detect the activities of Answer: B is…

Network & Perimeter Auditing

Question

You are concerned about an attacker being able to get into your network. You want to make sure that you are informed of any network activity that is outside normal parameters. What is the best way to do this?

Options

AUtilize protocol analyzers.
BUser performance monitors.
CImplement signature based antivirus.
DImplement an anomaly based IDS.

How the community answered

(39 responses)

A
3% (1)
B
5% (2)
C
10% (4)
D
82% (32)

Explanation

An anomaly based Intrusion Detection System will monitor the network for any activity that is outside normal parameters (i.e. an anomaly) and inform you of it. Answer: C is incorrect. Antivirus software, while important, won't help detect the activities of Answer: B is incorrect. Performance monitors are used to measure normal network activity and look for problems such as bottlenecks. Answer: A is incorrect. A protocol analyzer does detect if a given protocol is moving over a particular network segment.

Topics

#anomaly-based IDS#intrusion detection#network monitoring#baseline detection

Community Discussion

No community discussion yet for this question.

Full GSNA Practice