MENU
Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?
Suggested Answer: D
Get Premium GCIA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
48 comments · newest first
LE
Levi
10 months ago
Anomaly-based? Really? I didn't know that!
SH
Shaquana
11 months ago
Wait, are we sure it's not A? Signature-based seems similar.
DA
Darell
11 months ago
I thought it was B, network-based does that too, right?
DO
Doretha
11 months ago
Totally agree, D is the right choice!
RO
Rodney
11 months ago
It's definitely D, anomaly-based IDS compares against a baseline.
AL
Alline
11 months ago
I’m a bit confused; I thought signature-based was more about known threats rather than monitoring against a baseline.
KR
Kris
12 months ago
I practiced a similar question, and I believe anomaly-based is correct because it detects unusual patterns compared to normal behavior.
RA
Raylene
12 months ago
I'm not entirely sure, but I remember something about network-based systems being more about traffic analysis rather than baselines.
MI
Ming
12 months ago
I think the answer might be D, anomaly-based, since it focuses on deviations from a baseline.
LA
Lavonna
12 months ago
I've got a good handle on IDS concepts, so I'm confident the answer is D. Anomaly-based IDS monitors network traffic and compares it to a baseline to detect unusual activity.
DE
Dell
12 months ago
I'm a bit confused on the differences between the IDS types. I'll have to review my notes to make sure I understand this properly before answering.
ET
Ettie
1 year ago
Okay, let me see. Signature-based IDS looks for known attack patterns, network-based IDS monitors the network, and file-based IDS checks file integrity. So I'm pretty sure the answer is D - Anomaly-based IDS.
LI
Lizbeth
1 year ago
This one seems pretty straightforward. I think the answer is D - Anomaly-based IDS, since it monitors network traffic and compares it to a baseline.
KA
Kate
1 year ago
Hmm, I'm not totally sure about this one. I know there are different types of IDS, but I'm a little fuzzy on the details. I'll have to think it through carefully.
AV
Avery
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to carefully read through the options and think about the implications of each approach.
CH
Chun
1 year ago
Hmm, I'm not sure about this one. The options all sound similar in terms of IT processes. I'll have to think it through carefully.
DO
Donte
1 year ago
Can't we just use a network-based IDS to monitor the network traffic and then send the intruders a strongly worded email? That's how I handle all my cybersecurity problems.
LI
Lisandra
1 year ago
Wait, what? Comparing network traffic to a baseline? That sounds like a lot of work. I just want to get this exam over with. Maybe I'll just go with the most tech-sounding option, anomaly-based. That's gotta be it, right?
SA
Salley
1 year ago
Signature-based could also be a good option. It's a common method used for intrusion detection.
VI
Virgie
1 year ago
I'm not sure, but I think network-based might be the right answer. It seems to match the description.
AR
Arthur
1 year ago
Yeah, I agree. It's always good to go with the option that sounds the most advanced.
CA
Camellia
1 year ago
I think anomaly-based is a good choice. It does sound pretty techy.
LO
Lorrine
1 year ago
Ooh, I know this one! It's definitely anomaly-based. That's the one that looks for deviations from the normal traffic patterns, right? I got this!
RO
Ronald
1 year ago
Actually, it's anomaly-based. It's all about detecting abnormal behavior on the network.
RE
Reuben
1 year ago
I think it's signature-based, it matches patterns of known attacks.
KA
Katy
1 year ago
Yes, you're correct! Anomaly-based IDS does indeed monitor network traffic for deviations from normal patterns.
FR
Franklyn
1 year ago
Okay, let's think this through. Signature-based and file-based don't really fit the description, so I'm gonna go with either network-based or anomaly-based.
CA
Carissa
1 year ago
Let's go with anomaly-based then.
EL
Eleni
1 year ago
Yeah, I agree. Network-based seems like a good choice too.
JE
Jessenia
1 year ago
I think anomaly-based makes more sense here.
FI
Filiberto
1 year ago
Hmm, this one seems tricky. I remember learning about the different types of IDS, but I'm not sure which one specifically monitors network traffic against a baseline.
LA
Launa
1 year ago
Great, thanks for the clarification!
WH
Whitney
1 year ago
I agree, Anomaly-based IDS monitors network traffic against a baseline
SH
Sherell
1 year ago
That makes sense, thanks for the clarification!
TA
Talia
1 year ago
I think the answer is D) Anomaly-based
MA
Maddie
1 year ago
I agree, Anomaly-based IDS monitors network traffic against a baseline.
TO
Tomoko
1 year ago
I think the correct answer is D) Anomaly-based.
CY
Cyndy
1 year ago
D) Anomaly-based
ST
Stephaine
1 year ago
D) Anomaly-based
ST
Stevie
1 year ago
C) File-based
WA
Walker
1 year ago
B) Network-based
RE
Reita
1 year ago
A) Signature-based
RO
Rosalyn
1 year ago
C) File-based
GL
Glynda
1 year ago
B) Network-based
DO
Donette
1 year ago
A) Signature-based
HO
Howard
1 year ago
I'm not sure, but I think it's between B) Network-based and D) Anomaly-based.
RO
Rory
2 years ago
I agree with Bok, Anomaly-based IDS compares network traffic against a baseline to detect unusual behavior.
BO
Bok
2 years ago
I think the answer is D) Anomaly-based.