Which of the following usually provides reliable, real-time information without consuming network or host resources?

The correct answer is A. network-based IDS. A network-based IDS (NIDS) operates by passively monitoring a copy of network traffic (via a tap or port mirroring) as packets traverse the network. Because it runs on a dedicated appliance or sensor - not on production hosts - it does not consume CPU, memory, or disk I/O on the

Submitted by krish.m· Apr 18, 2026Network and Communications Security

Question

Which of the following usually provides reliable, real-time information without consuming network or host resources?

Options

Anetwork-based IDS
Bhost-based IDS
Capplication-based IDS
Dfirewall-based IDS

How the community answered

(24 responses)

A
92% (22)
C
4% (1)
D
4% (1)

Explanation

A network-based IDS (NIDS) operates by passively monitoring a copy of network traffic (via a tap or port mirroring) as packets traverse the network. Because it runs on a dedicated appliance or sensor - not on production hosts - it does not consume CPU, memory, or disk I/O on the monitored systems. It also does not add latency to network traffic in passive mode. This makes it the IDS type best suited for real-time detection without impacting host or network performance. Host-based and application-based IDS do consume resources on the systems they monitor.

Topics

#IDS#Network-based IDS#Security Monitoring#Network Security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice