212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ46

Network Monitoring and Analysis

SecuraCorp, a leading financial institution, is concerned about zero-day vulnerabilities. With an extensive network infrastructure and multiple transaction points, it requires a system that does not rely solely on signatures but can effectively detect suspicious patterns from network behavior. Which type of IDS/IPS should SecuraCorp primarily deploy to meet these needs?

  • A Signature-based IDS
  • B Host-based IDS
  • C Network-based IDS
  • D Anomaly-based IDS
Explanation

Anomaly-based IDS/IPS establishes or uses a baseline of normal activity and identifies deviations or suspicious behavior. This can detect previously unknown, including zero-day, attacks that signature-based systems may miss because no matching signature exists.

Community Discussion

No comments yet. Be the first to start the discussion!