A network manager is interested in a device that watches for threats on a network but does not act on its own, and also does not put a strain on client systems. Which of the following would BEST…

The correct answer is B. NIDS. The two key requirements are: (1) passive monitoring only - does not act on its own, and (2) network-based - does not run on or strain client systems. A Network-based Intrusion Detection System (NIDS) meets both criteria: it passively monitors network traffic by analyzing a…

Network security

Question

A network manager is interested in a device that watches for threats on a network but does not act on its own, and also does not put a strain on client systems. Which of the following would BEST meet these requirements?

Options

AHIDS
BNIDS
CNIPS
DHIPS

How the community answered

(64 responses)

A
3% (2)
B
89% (57)
C
2% (1)
D
6% (4)

Explanation

The two key requirements are: (1) passive monitoring only - does not act on its own, and (2) network-based - does not run on or strain client systems. A Network-based Intrusion Detection System (NIDS) meets both criteria: it passively monitors network traffic by analyzing a copy of packets (typically via a mirror/SPAN port) and generates alerts without blocking traffic. NIPS (Network Intrusion Prevention System) would actively block threats, violating requirement 1. HIDS and HIPS are host-based and run as agents on individual endpoints, violating requirement 2. NIDS is the correct answer.

Topics

#NIDS#intrusion detection#IDS vs IPS#passive monitoring

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice