SSCP · Question #944
A host-based IDS is resident on which of the following?
The correct answer is A. On each of the critical hosts. A host-based IDS (HIDS) is installed and runs directly on individual machines it is meant to protect - specifically the critical hosts in a network - monitoring system calls, logs, and file integrity on that specific device. Option B (decentralized hosts) is vague and doesn't…
Question
Options
- AOn each of the critical hosts
- Bdecentralized hosts
- Ccentral hosts
- Dbastion hosts
How the community answered
(26 responses)- A96% (25)
- B4% (1)
Explanation
A host-based IDS (HIDS) is installed and runs directly on individual machines it is meant to protect - specifically the critical hosts in a network - monitoring system calls, logs, and file integrity on that specific device. Option B (decentralized hosts) is vague and doesn't describe where HIDS software actually resides; decentralization is a network topology concept, not an IDS deployment target. Option C (central hosts) describes a network-based IDS (NIDS) architecture, where monitoring is centralized rather than per-device. Option D (bastion hosts) are hardened gateway machines exposed to untrusted networks - while a bastion host could run a HIDS, it is not the defining deployment target of a host-based IDS.
Memory tip: Think of the "H" in HIDS as standing for both "Host-based" and "Here on this machine" - unlike a network IDS that watches traffic from one central point, a HIDS lives on each critical host it watches.
Topics
Community Discussion
No community discussion yet for this question.