nerdexam
(ISC)2

SSCP · Question #950

Which of the following is an issue with signature-based intrusion detection systems?

The correct answer is A. Only previously identified attack signatures are detected. An issue with signature-based ID is that only attack signatures that are stored in their database New attacks without a signature would not be reported. They do require constant updates in order to maintain their effectiveness.

Submitted by kwame.gh· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Which of the following is an issue with signature-based intrusion detection systems?

Options

  • AOnly previously identified attack signatures are detected.
  • BSignature databases must be augmented with inferential elements.
  • CIt runs only on the windows operating system
  • DHackers can circumvent signature evaluations.

How the community answered

(58 responses)
  • A
    95% (55)
  • C
    2% (1)
  • D
    3% (2)

Explanation

An issue with signature-based ID is that only attack signatures that are stored in their database New attacks without a signature would not be reported. They do require constant updates in order to maintain their effectiveness.

Topics

#Intrusion Detection Systems (IDS)#Signature-based detection#Security monitoring#IDS limitations

Community Discussion

No community discussion yet for this question.

Full SSCP Practice