nerdexam
(ISC)2

SSCP · Question #365

Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and then triggers an…

The correct answer is A. Knowledge-Based ID System. Knowledge-based Intrusion Detection Systems use a database of previous attacks and known system vulnerabilities to look for current attempts to exploit their vulnerabilities, and trigger an alarm if an attempt is found. Application-Based ID System - "a subset of HIDS that…

Submitted by ashley.k· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and then triggers an alarm if an attempt is found?

Options

  • AKnowledge-Based ID System
  • BApplication-Based ID System
  • CHost-Based ID System
  • DNetwork-Based ID System

How the community answered

(42 responses)
  • A
    93% (39)
  • B
    2% (1)
  • C
    5% (2)

Explanation

Knowledge-based Intrusion Detection Systems use a database of previous attacks and known system vulnerabilities to look for current attempts to exploit their vulnerabilities, and trigger an alarm if an attempt is found. Application-Based ID System - "a subset of HIDS that analyze what's going on in an application using the transaction log files of the application." Host-Based ID System - "an implementation of IDS capabilities at the host level. Its most significant difference from NIDS is intrusion detection analysis, and related processes are limited to the boundaries of the host." Network-Based ID System - "a network device, or dedicated system attached to teh network, that monitors traffic traversing teh network segment for which it is integrated."

Topics

#Intrusion Detection System (IDS)#Knowledge-based IDS#Signature-based IDS#Security Monitoring

Community Discussion

No community discussion yet for this question.

Full SSCP Practice