Eccouncil 312-49 Exam - Topic 1 Question 17 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 17
Topic #: 1

George is a senior security analyst working for a state agency in Florid

a. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "time-based induction machine" be used. What IDS feature must George implement to meet this requirement?

APattern matching

BStatistical-based anomaly detection

CReal-time anomaly detection

DSignature-based anomaly detection

Show Suggested Answer

Suggested Answer: C

by Daniela at May 05, 2022, 12:56 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Antonio

4 months ago

D is definitely not it, signature-based is outdated for this requirement.

upvoted 0 times

...

Carol

4 months ago

Wait, is "time-based induction machine" even a real thing? Sounds made up!

upvoted 0 times

...

Laura

4 months ago

C seems like a solid option too, real-time is crucial.

upvoted 0 times

...

Aja

4 months ago

I think B is the right choice, statistical-based makes more sense.

upvoted 0 times

...

Aja

5 months ago

Gotta go with A, pattern matching is key for that!

upvoted 0 times

...

Ira

5 months ago

I’m a bit confused. I thought signature-based anomaly detection was more about known threats, not time-based analysis. Could that be the right answer?

upvoted 0 times

...

Pok

5 months ago

I practiced a question like this, and I feel like real-time anomaly detection could fit the bill since it reacts to threats as they happen.

upvoted 0 times

...

Pearly

5 months ago

I think "time-based" might refer to how the system analyzes data over time, so maybe statistical-based anomaly detection? That sounds familiar.

upvoted 0 times

...

Reuben

5 months ago

I remember something about time-based induction machines, but I'm not sure which IDS feature that relates to. Could it be pattern matching?

upvoted 0 times

...

Altha

5 months ago

This looks like a pretty straightforward question. I think the key is to focus on the requirements - we need to create Sling models and configure the mime type. I'd go with option C.

upvoted 0 times

...

Beckie

5 months ago

Okay, I've got this. The key steps are requirement analysis, model design, and testing. I'll make sure to select those options on the exam.

upvoted 0 times

...

Vannessa

5 months ago

This looks like a straightforward Kubernetes deployment question. I think the key is to understand where the Docker image needs to be stored - either in Cloud Storage or Container Registry.

upvoted 0 times

...