ExamGecko
Home Home / ISC / CCSP
Question list
Search
Search

Question 270 - CCSP discussion

Report
Export

Although host-based and network-based IDSs perform similar functions and have similar capabilities, which of the following is an advantage of a network-based IDS over a host-based IDS, assuming all capabilities are equal?

A.
Segregated from host systems
Answers
A.
Segregated from host systems
B.
Network access
Answers
B.
Network access
C.
Scalability
Answers
C.
Scalability
D.
External to system patching
Answers
D.
External to system patching
Suggested answer: A

Explanation:

A network-based IDS has the advantage of being segregated from host systems, and as such, it would not be open to compromise in the same manner a host-based system would be. Although a network-based IDS would be external to system patching, this is not the best answer here because it is a minor concern compared to segregation due to possible host compromise. Scalability is also not the best answer because, although a network-based IDS does remove processing from the host system, it is not a primary security concern. Network access is not a consideration because both a host-based IDS and a network-based IDS would have access to network resources.

asked 18/09/2024
Earl Frederick
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first