GISF: GIAC Information Security FundamentalsDemo

By GIAC · Question Mode

QuestionQ115

Defensive Technologies and Emerging Intelligence

John is a Network Security Professional assigned to test the security of www.we-are-secure.com. Working on the Linux operating system, he wants to install an Intrusion Detection System on the We-are-secure server so he can receive alerts for any hacking attempts. Which of the following tools can John use to accomplish this task?

Each correct answer represents a complete solution. Choose all that apply.

Choose three
  • A Samhain
  • B SARA
  • C Snort
  • D Tripwire
Explanation

Samhain and Tripwire are host-based intrusion-detection/file-integrity-monitoring tools that can alert on suspicious or unauthorized changes on a server. Snort is a network intrusion detection system that analyzes traffic and can generate alerts for malicious activity. SARA is a vulnerability assessment tool, not an intrusion detection system.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!