SSCP · Question #365
Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and then triggers an…
The correct answer is A. Knowledge-Based ID System. Knowledge-based Intrusion Detection Systems use a database of previous attacks and known system vulnerabilities to look for current attempts to exploit their vulnerabilities, and trigger an alarm if an attempt is found. Application-Based ID System - "a subset of HIDS that…
Question
Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and then triggers an alarm if an attempt is found?
Options
- AKnowledge-Based ID System
- BApplication-Based ID System
- CHost-Based ID System
- DNetwork-Based ID System
How the community answered
(42 responses)- A93% (39)
- B2% (1)
- C5% (2)
Explanation
Knowledge-based Intrusion Detection Systems use a database of previous attacks and known system vulnerabilities to look for current attempts to exploit their vulnerabilities, and trigger an alarm if an attempt is found. Application-Based ID System - "a subset of HIDS that analyze what's going on in an application using the transaction log files of the application." Host-Based ID System - "an implementation of IDS capabilities at the host level. Its most significant difference from NIDS is intrusion detection analysis, and related processes are limited to the boundaries of the host." Network-Based ID System - "a network device, or dedicated system attached to teh network, that monitors traffic traversing teh network segment for which it is integrated."
Topics
Community Discussion
No community discussion yet for this question.