Network Security Topic 7

What is the primary function of an Intrusion Detection System (IDS)?

• To prevent all attacks

• To detect unauthorized access

• To encrypt sensitive data

• To manage network traffic

Which of the following best describes an Intrusion Prevention System (IPS)?

• A type of firewall

• A method for logging network activity

• A system that can both detect and prevent intrusions

• A system that only detects intrusions

What are the two common methods used by IDSs to detect intrusions?

• Traffic analysis and packet filtering

• Anomaly based detection and heuristic detection

• Behavioral analysis and pattern matching

• Signature based detection and anomaly based detection

What is a significant disadvantage of anomaly-based IDS?

• They are too expensive to implement

• They can generate a high number of false alarms

• They require constant manual monitoring

• They are ineffective against known attacks

Which type of IDS is designed to monitor activity on a specific host?

• Network-based IDS

• Host-based IDS

• Distributed IDS

• Centralized IDS

What does a true positive indicate in the context of IDS detection?

• An attack was missed by the IDS

• No attack occurred

• An attack was detected correctly

• A legitimate activity was misidentified as an attack

What is a common response to an intrusion detected by an IDS?

• Increasing network bandwidth

• Ignoring the alert

• Blocking the source IP address

• Rebooting the network

What is the main purpose of logging in an IDS?

• To prevent future attacks

• To analyze network performance

• To provide a record of detected activities

• To encrypt sensitive information

What is a potential issue with false negatives in IDS?

• They result in missed attacks

• They can lead to unnecessary alerts

• They indicate a successful attack

• They may cause legitimate activities to be flagged

What is the primary challenge for IDSs when dealing with encrypted traffic?

• They cannot detect any traffic

• They require more bandwidth

• They struggle to analyze the content

• They are too slow to process it