exam questions

Exam 312-50 All Questions

View all questions & answers for the 312-50 exam

Exam 312-50 topic 3 question 56 discussion

Actual exam question from ECCouncil's 312-50
Question #: 56
Topic #: 3
[All 312-50 Questions]

What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  • A. They do not use host system resources.
  • B. They are placed at the boundary, allowing them to inspect all traffic.
  • C. They are easier to install and configure.
  • D. They will not interfere with user interfaces.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
aids00123
8 months, 2 weeks ago
Selected Answer: B
Network based IDS still run on the user's systems e.g. Rapid 7, therefore they still use host resources
upvoted 1 times
...
Novmejst
1 year ago
Selected Answer: B
The main advantage that a network-based intrusion detection/prevention system (IDS/IPS) has over a host-based solution is that it can monitor network traffic across multiple hosts and detect attacks at the network level. Network-based IDS/IPS systems analyze network traffic and compare it to known attack patterns, signatures, and behavior to identify and block suspicious activity in real-time. This allows them to protect multiple hosts simultaneously, without the need for individual installations on each host.
upvoted 1 times
...
Novmejst
1 year ago
Selected Answer: B
They are placed at the boundary, allowing them to inspect all traffic.
upvoted 1 times
...
Borjebour
1 year, 1 month ago
Selected Answer: B
Network based will also cover devices that cannot have host based ids installed (like IoT).
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago