APPRENTICE: Palo Alto Networks Certified Cybersecurity ApprenticeDemo

By Palo Alto Networks · Question Mode

QuestionQ89

Network Security

Which statement most clearly differentiates a Host-Based Intrusion Detection System (HIDS) from a Network-Based Intrusion Detection System (NIDS)?

  • A Network-Based is installed on an individual endpoint to monitor all inbound/outbound traffic of that device.
  • B Host-Based is installed on an individual endpoint to monitor all inbound/outbound traffic of that traffic.
  • C Host-Based directly integrates with the endpoint and is known as the last line of defense.
  • D Network-Based directly integrates with the endpoint and is known as the last line of defense.
Explanation

A Host-Based Intrusion Detection System is deployed on an individual endpoint and monitors activity within that host, such as system events, processes, files, and logs. This direct endpoint integration makes it a final layer of defense when network controls do not detect or prevent malicious activity. A Network-Based Intrusion Detection System instead monitors traffic on network segments or devices, often covering multiple hosts.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!