Exam CCSP topic 1 question 270 discussion

This is A. A network-based IDS (NIDS) operates independently of the systems it monitors. This segregation provides an advantage because the IDS is not directly affected by issues on the host, such as system crashes, resource limitations, or compromises, ensuring continued monitoring and detection. The others are ruled out. B. Network access: Both host-based and network-based IDSs can monitor network traffic, but NIDS specifically analyzes packets as they traverse the network. This is not an exclusive advantage over host-based IDS. C. Scalability: NIDS can scale by monitoring entire network segments, but scalability is not an inherent advantage over host-based IDS since both can be designed for scalability. D. External to system patching: While NIDS is external to hosts, system patching is not a primary factor distinguishing its advantage. Both systems need updates to remain effective.

An advantage of a network-based Intrusion Detection System (IDS) over a host-based IDS, assuming all capabilities are equal, is: A. Segregated from host systems

Segregated from host systems

A. Segregated from host systems. Network-based IDSs offer the advantage of being segregated from host systems, meaning they do not rely on the hosts they are monitoring. This separation helps them remain unaffected by any potential compromises or failures on the host systems, enhancing overall security.

For the context of CCSP, when discussing the advantage of network-based IDS over host-based IDS, considering that all other capabilities are equal, one significant advantage of a network-based IDS is indeed its segregation from host systems (Option A). This positioning allows the network-based IDS to monitor traffic and activities without being directly affected by compromises or alterations on individual host systems.

The "best" answer is A.

C: Scalability

C. Scalability

NIDS would have network access as opposed to HIDS which only have host related network access.

Scalibility should be the answer.