Network-based Intrusion Detection systems:

The correct answer is A. Commonly reside on a discrete network segment and monitor the traffic on that network. Network-based ID systems: - Commonly reside on a discrete network segment and monitor the traffic on that network - Usually consist of a network appliance with a Network Interface Card (NIC) that is operating in promiscuous mode and is intercepting and analyzing the network…

Submitted by tunde_lagos· Apr 18, 2026Network and Communications Security

Question

Options

ACommonly reside on a discrete network segment and monitor the traffic on that network
BCommonly will not reside on a discrete network segment and monitor the traffic on that
CCommonly reside on a discrete network segment and does not monitor the traffic on that
DCommonly reside on a host and and monitor the traffic on that specific host.

How the community answered

(28 responses)

A
89% (25)
B
7% (2)
D
4% (1)

Explanation

Network-based ID systems: - Commonly reside on a discrete network segment and monitor the traffic on that network - Usually consist of a network appliance with a Network Interface Card (NIC) that is operating in promiscuous mode and is intercepting and analyzing the network packets in real time "A passive NIDS takes advantage of promiscuous mode access to the network, allowing it to gain visibility into every packet traversing the network segment. This allows the system to inspect packets and monitor sessions without impacting the network, performance, or the systems and applications utilizing the network." NOTE FROM CLEMENT: A discrete network is a synonym for a SINGLE network. Usually the sensor will monitor a single network segment, however there are IDS today that allow you to monitor multiple LAN's at the

Topics

#Intrusion Detection Systems#NIDS#Network Monitoring#Security Architecture

Community Discussion

No community discussion yet for this question.

Full SSCP Practice