exam questions

Exam CISSP-ISSAP All Questions

View all questions & answers for the CISSP-ISSAP exam

Exam CISSP-ISSAP topic 1 question 49 discussion

Actual exam question from ISC's CISSP-ISSAP
Question #: 49
Topic #: 1
[All CISSP-ISSAP Questions]

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

  • A. Network-based
  • B. Anomaly-based
  • C. File-based
  • D. Signature-based
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
74gjd_37
4 months, 2 weeks ago
Selected Answer: B
B. https://www.fortinet.com/resources/cyberglossary/intrusion-detection-system#:~:text=Anomaly-based%20intrusion%20detection%20system%20%28AIDS%29%3A%20This%20solution%20monitors,the%20network%2C%20including%20bandwidth%2C%20devices%2C%20ports%2C%20and%20protocols. Anomaly-based intrusion detection system (AIDS): This solution monitors traffic on a network and compares it with a predefined baseline that is considered "normal." It detects anomalous activity and behavior across the network, including bandwidth, devices, ports, and protocols. An AIDS solution uses machine-learning techniques to build a baseline of normal behavior and establish a corresponding security policy. This ensures businesses can discover new, evolving threats that solutions like SIDS cannot.
upvoted 1 times
...
Banzaaai
1 year, 5 months ago
Selected Answer: B
B. Anomaly-based because deviation from baseline
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago