Intrusion Detection Systems Quiz

What is an Intrusion Detection System (IDS)?

• A tool for preventing unauthorized access

• A method for analyzing network traffic

• A system for identifying and reporting unauthorized network activity

• A type of firewall

What does a Host-Based Intrusion Detection System (HIDS) primarily monitor?

• Packet headers

• Network traffic across multiple hosts

• Specific operating systems and applications on a host

• External network attacks

What is the main function of a Network-Based Intrusion Detection System (NIDS)?

• To prevent unauthorized access

• To log activities on a single server

• To monitor and inspect network traffic

• To analyze specific host activities

What is a Hybrid Intrusion Detection System?

• A type of firewall

• A system that only detects external attacks

• A combination of Host-based and Network-based IDS

• A system that only monitors network traffic

What is the purpose of honeypots in network security?

• To prevent unauthorized access

• To gather information about attackers

• To monitor network traffic

• To encrypt sensitive data

What do passive IDS systems do?

• Analyze encrypted traffic

• Automatically block malicious traffic

• Log information and signal alerts

• Take preventive measures against attacks

What is a key characteristic of Signature Based IDS?

• Detects unknown attacks

• Uses statistical calculations

• Matches traffic against predetermined attack signatures

• Monitors only internal network activity

What is a drawback of Anomaly Based IDS?

• They are easy to implement

• They can detect new attacks without signatures

• They have high false alarm rates

• They require minimal monitoring

What is a false negative in the context of IDS?

• A system that logs all activities

• An incorrect alert for normal activity

• Failure to detect an actual attack

• A successful detection of a known attack

Why are IDS important for organizations?

• They help identify vulnerabilities and weaknesses

• They eliminate the need for firewalls

• They prevent all types of attacks

• They are inexpensive to implement