Discuss EC-Council ECSAv10 Exam Topic 3 Question 110

George is a senior security analyst working for a state agency in Florid

a. His state's congress just passed a billmandating every state agency to undergo a security audit annually. After learning what will be required, Georgeneeds to implement an IDS as soon as possible before the first audit occurs.

The state bill requires that an IDSwith a "time-based induction machine" be used. What IDS feature must George implement to meet thisrequirement?

APattern matching

BStatistical-based anomaly detection

CReal-time anomaly detection

DSignature-based anomaly detection

Suggested Answer: C

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Titus 24 days ago

I see your point. It’s all about compliance and effectiveness.

Trina 29 days ago

It’s about balancing known and unknown threats. Statistical-based seems best.

Yolando 1 month ago

I still think pattern matching is essential for identifying known threats.

Oretha 1 month ago

True, but the bill specifically mentions "time-based."

Titus 1 month ago

But isn’t C) Real-time anomaly detection crucial for immediate threats?

Trina 2 months ago

I agree with Oretha. Statistical-based helps with time-based analysis.

Yolando 2 months ago

I feel like it’s A) Pattern matching. It’s more straightforward.

Oretha 2 months ago

This is tricky! I think it’s B) Statistical-based anomaly detection.

Theodora 2 months ago

I’m not sure if real-time is necessary; could be overkill for some agencies.

Margery 2 months ago

Definitely not signature-based, that’s outdated for audits.

Sommer 3 months ago

Wait, what's a "time-based induction machine"? That sounds complicated!

Dion 3 months ago

I think pattern matching is the way to go.

Bea 3 months ago

Sounds like George needs to go with real-time anomaly detection!

Skye 3 months ago

Signature-based anomaly detection seems like a safe bet, but I feel like it doesn't align with the "time-based" requirement.

Janna 3 months ago

I recall a practice question that mentioned real-time anomaly detection as a feature, but I can't remember if it fits this scenario.

Bernadine 3 months ago

I think it might be related to statistical-based anomaly detection since it involves analyzing patterns over time, but I'm not completely confident.

Chauncey 4 months ago

I remember studying about different types of IDS, but I'm not sure what "time-based induction machine" specifically refers to.

EC-Council ECSAv10 Exam - Topic 3 Question 110 Discussion