A system administrator is implementing an IDS on the database server to see who is trying to access the server. The administrator relies on the software provider for what to detect. Which of the…

The correct answer is C. Signature based IDS. Signature detection involves searching network traffic for a series of bytes or packet sequences known to be malicious. A key advantage of this detection method is that signatures are easy to develop and understand if you know what network behavior you're trying to identify.

Network security

Question

A system administrator is implementing an IDS on the database server to see who is trying to access the server. The administrator relies on the software provider for what to detect. Which of the following would MOST likely be installed?

Options

ABehavior based IDS
BNetwork based IDS
CSignature based IDS
DHoneypot

How the community answered

(54 responses)

A
9% (5)
B
2% (1)
C
83% (45)
D
6% (3)

Explanation

Signature detection involves searching network traffic for a series of bytes or packet sequences known to be malicious. A key advantage of this detection method is that signatures are easy to develop and understand if you know what network behavior you're trying to identify.

Topics

#IDS#signature-based detection#database security#intrusion detection

Community Discussion

No community discussion yet for this question.

Full JK0-019 Practice