Eccouncil 312-50 Exam - Topic 1 Question 69 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 69
Topic #: 1

Tremp is an IT Security Manager, and he is planning to deploy an IDS in his small company. He is looking for an IDS with the following characteristics: - Verifies success or failure of an attack - Monitors system activities Detects attacks that a network-based IDS fails to detect - Near real-time detection and response - Does not require additional hardware - Lower entry cost Which type of IDS is best suited for Tremp's requirements?

AGateway-based IDS

BNetwork-based IDS

CHost-based IDS

DOpen source-based

Show Suggested Answer

Suggested Answer: C

by Benedict at Apr 22, 2023, 03:11 AM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gilma

7 months ago

Open source options are great for lower costs, but are they reliable enough?

upvoted 0 times

...

Luann

7 months ago

Gateway-based IDS could also work, but it might miss some host-level attacks.

upvoted 0 times

...

Jolanda

7 months ago

Wait, does it really not require extra hardware? Sounds too good to be true.

upvoted 0 times

...

Tyisha

7 months ago

I agree, it can monitor system activities effectively!

upvoted 0 times

...

Huey

7 months ago

Host-based IDS seems like the best fit for those needs.

upvoted 0 times

...

Antione

8 months ago

I feel like gateway-based IDS could be useful, but it might not verify the success or failure of an attack as well as a host-based IDS would.

upvoted 0 times

...

Kate

8 months ago

I practiced a similar question, and I think the lower entry cost could point towards a host-based IDS since it usually doesn't need extra hardware.

upvoted 0 times

...

Kizzy

8 months ago

I'm not entirely sure, but I think a network-based IDS might miss some attacks that a host-based one could catch.

upvoted 0 times

...

Nelida

8 months ago

I remember studying that host-based IDS can monitor system activities closely, which might fit Tremp's needs.

upvoted 0 times

...

Shonda

8 months ago

This is a good question to test our understanding of Cisco UCS architecture. I'm confident I can eliminate the incorrect options and select the valid statement about standalone UCS server deployments.

upvoted 0 times

...

Emily

8 months ago

Okay, I've got this. The objective of information classification is to define different levels of sensitivity, so I'm going to go with option C.

upvoted 0 times

...

Jaime

8 months ago

Okay, this seems straightforward. I know UDX allows you to write custom code to perform new types of analyses right in the database, so that's definitely one of the main purposes. I'll mark that one down.

upvoted 0 times

...