A server administrator, Ann, is deploying a server that she wants to mitigate intrusions from zero day exploits. Which of the following should be deployed?

The correct answer is A. Behavior based IPS. Zero-day exploits are previously unknown vulnerabilities with no existing patches or signatures. Signature-based tools (like option B, signature-based IDS, and option C, antivirus) rely on known threat databases and cannot detect what they have never seen. A behavior-based IPS…

Network security

Question

Options

ABehavior based IPS
BSignature based IDS
CAntivirus software
DAccess Control Lists

How the community answered

(25 responses)

A
72% (18)
B
4% (1)
C
8% (2)
D
16% (4)

Explanation

Zero-day exploits are previously unknown vulnerabilities with no existing patches or signatures. Signature-based tools (like option B, signature-based IDS, and option C, antivirus) rely on known threat databases and cannot detect what they have never seen. A behavior-based IPS (Intrusion Prevention System) monitors for abnormal or suspicious activity patterns - such as unexpected process behavior, privilege escalation, or unusual network traffic - allowing it to flag and block novel attacks even without a known signature. Option D, Access Control Lists, restrict traffic by rules but do not detect or respond to intrusions.

Topics

#behavior-based IPS#zero-day exploit#intrusion prevention#anomaly detection

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice