GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ360

IDS Fundamentals and Network Architecture

Which of the following applications is unable to proactively detect anomalies associated with a computer?

  • A NIDS
  • B Firewall installed on the computer
  • C HIDS
  • D Anti-virus scanner
Explanation

A host firewall primarily permits or blocks network traffic according to configured rules. It is an enforcement control, not an anomaly-detection mechanism; HIDS, NIDS, and antivirus tools can perform detection of suspicious or anomalous activity.

Community Discussion

No comments yet. Be the first to start the discussion!