Mile2_Security
ML0-320 · Question #125
Intrusion Detection Systems have multiple ways to decode the information. Which of the following definitions would best describe Protocol Anomaly Detection within an Intrusion Detection System (IDS)…
The correct answer is C. Compares traffic to RFC standards and reports deviations. See the full explanation below for the reasoning.
Question
Intrusion Detection Systems have multiple ways to decode the information. Which of the following definitions would best describe Protocol Anomaly Detection within an Intrusion Detection System (IDS) engine?
Options
- AInterprets the attack as the victim would for greater accuracy
- BIdentifies attacks that are based on condition, not patterns
- CCompares traffic to RFC standards and reports deviations
- DIdentifies traffic that breaks policy or is not normal for network
How the community answered
(45 responses)- A7% (3)
- B13% (6)
- C78% (35)
- D2% (1)
Community Discussion
No community discussion yet for this question.