MENU
Kyle is an IT consultant working on a contract for a large energy company in Houston. Kyle was hired on to do contract work three weeks ago so the company could prepare for an external IT security audit. With suggestions from upper management, Kyle has installed a network-based IDS system. This system checks for abnormal behavior and patterns found in network traffic that appear to be dissimilar from the traffic normally recorded by the IDS. What type of detection is this network-based IDS system using?
Suggested Answer: A
Get Premium 312-38 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
AD
Adria
12 months ago
Nah, it's not dissimilarity algorithms. That's not a thing here.
EM
Emelda
12 months ago
Really? I didn't know they used that for network traffic!
GL
Gladis
12 months ago
Anomaly detection makes sense, especially for abnormal patterns.
LA
Lavera
1 year ago
I thought it was misuse detection? Not sure about this.
MO
Monroe
1 year ago
Definitely anomaly detection! That's how it works.
KR
Kristel
1 year ago
I remember definition-based detection being about specific signatures, so that can't be right either. A seems to fit best with what Kyle is doing.
JE
Jenelle
1 year ago
I'm not entirely sure, but I feel like dissimilarity algorithms might be a term I came across. It sounds similar to what the question describes.
LA
Lashanda
1 year ago
I think the answer is A, anomaly detection. I remember studying that it looks for deviations from normal patterns in network traffic.
GL
Glenn
1 year ago
I practiced a question like this before, and I believe misuse detection is more about known threats, so I don't think it's C.
TW
Twila
1 year ago
Hmm, creating a unique global customer ID seems like a good starting point to resolve the inconsistent customer data.
LA
Laurena
1 year ago
I'm a bit confused by the multiple exhibits. I'll need to make sure I understand what each one is showing before I can determine the root cause.
LE
Leandro
1 year ago
I'm a bit confused here. Should I restore from a snapshot or a backup? I'll have to double-check the details.
TR
Tracey
1 year ago
I remember practicing a similar question where we had to adjust for a double entry, but I'm not certain if it was about gas bills specifically.
JU
Justine
1 year ago
This is a real ethical dilemma. I'd start by double-checking my work to make sure my conclusion is solid. Then I'd try to have an open and honest discussion with my supervisor, laying out the facts and my reasoning. Hopefully they'll understand. But if they insist on a favorable recommendation, I may need to take it up the chain or even consider resigning on principle.