The fact that a network-based IDS reviews packets payload and headers enable which of the following?

The correct answer is A. Detection of denial of service. By inspecting both packet headers (source/destination IP and port, flags, protocol) and payloads (content), a network-based IDS can detect Denial of Service (DoS) attacks - for example, by identifying SYN floods, ICMP floods, or malformed packet patterns that indicate an…

Submitted by yaw92· Apr 18, 2026Network and Communications Security

Question

Options

ADetection of denial of service
BDetection of all viruses
CDetection of data corruption
DDetection of all password guessing attacks

How the community answered

(23 responses)

A
91% (21)
B
4% (1)
C
4% (1)

Explanation

By inspecting both packet headers (source/destination IP and port, flags, protocol) and payloads (content), a network-based IDS can detect Denial of Service (DoS) attacks - for example, by identifying SYN floods, ICMP floods, or malformed packet patterns that indicate an attempt to overwhelm a target. It cannot detect ALL viruses (B), because encrypted or novel malware in payloads may evade signature-based detection. It cannot reliably detect data corruption (C). It cannot catch ALL password guessing attacks (D), particularly those conducted over encrypted channels or at low rates designed to avoid detection.

Topics

#Network IDS (NIDS)#Denial of Service (DoS)#Packet analysis#Intrusion Detection

Community Discussion

No community discussion yet for this question.

Full SSCP Practice