SSCP · Question #1113
An intrusion detection system is an example of what type of countermeasure?
The correct answer is D. Detective. An Intrusion Detection System (IDS) is classified as a detective countermeasure because its primary function is to monitor for and alert about suspicious activities or intrusions rather than actively stopping them.
Question
An intrusion detection system is an example of what type of countermeasure?
Options
- APreventative
- BCorrective
- CSubjective
- DDetective
- EPostulative
How the community answered
(38 responses)- C5% (2)
- D92% (35)
- E3% (1)
Why each option
An Intrusion Detection System (IDS) is classified as a detective countermeasure because its primary function is to monitor for and alert about suspicious activities or intrusions rather than actively stopping them.
Preventative countermeasures aim to stop an attack from happening in the first place, such as firewalls or access controls, which is not the primary function of an IDS.
Corrective countermeasures aim to fix or mitigate the impact of an incident after it has occurred, such as backups or disaster recovery plans.
"Subjective" is not a standard category for security countermeasures.
An Intrusion Detection System (IDS) primarily functions by monitoring and analyzing network traffic or system logs to identify suspicious patterns or known attack signatures. Its role is to detect intrusions or malicious activities and alert administrators, rather than actively preventing the attack itself.
"Postulative" is not a standard category for security countermeasures.
Concept tested: Types of security countermeasures (Detective control)
Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/design-network-segmentation#security-controls-in-network-segmentation
Topics
Community Discussion
No community discussion yet for this question.