Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 10 Question 5 Discussion

Posted by Ressie on May 09, 2022 at 03:54 AM

Which of the following would assist the most in Host Based intrusion detection?

Suggested Answer: A

To assist in Intrusion Detection you would review audit logs for access violations.

The following answers are incorrect:

access control lists. This is incorrect because access control lists determine who has access to what but do not detect intrusions.

security clearances. This is incorrect because security clearances determine who has access to what but do not detect intrusions.

host-based authentication. This is incorrect because host-based authentication determine who have been authenticated to the system but do not dectect intrusions.


Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
DO
Dorsey 11 months ago
Totally agree with audit trails being the most helpful!
DE
Delsie 12 months ago
Wait, security clearances? Really? That seems off.
KI
Kirby 12 months ago
Access control lists are important, but not the best for detection.
AD
Adell 12 months ago
I think host-based authentication is key too.
VI
Vincent 1 year ago
Definitely audit trails! They provide a detailed log of activities.
LO
Lovetta 1 year ago
I’m leaning towards audit trails too, but I wonder if security clearances might play a role in preventing unauthorized access in the first place.
JO
Joaquin 1 year ago
Host-based authentication seems like it could help, but I feel like audit trails would provide more detailed insights into what happened during an intrusion.
DI
Dick 1 year ago
I remember a practice question that emphasized the role of access control lists in security, but I don't recall how they relate specifically to intrusion detection.
MO
Mozell 1 year ago
I think audit trails are really important for host-based intrusion detection, but I'm not entirely sure if they're the best option here.
VI
Vincent 1 year ago
I remember learning about DLP in class, I'm pretty confident I can select the correct answer.
OD
Odette 1 year ago
This looks like a pretty straightforward question about VMware Horizon and vSAN. I think I've got a good handle on this topic, so I'll give it a shot.
TA
Tamekia 1 year ago
I feel like G could be true, too, but I'm not sure how outsourcing increases confidentiality.
JA
Jaclyn 1 year ago
I'm a bit confused about the SQL Server licensing aspect. Is that something Blue Prism explicitly considers for its licenses?
0/2000 characters

Save Cancel