ExamGecko
Search Search Login
Home Home / Palo Alto Networks / PCCET
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next- generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages?
Layer 4 of the TCP/IP Model corresponds to which three Layer(s) of the OSI Model? (Choose three.)
What type of area network connects end-user devices?
In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly identified as malicious traffic?
Which model would a customer choose if they want full control over the operating system(s) running on their cloud computing platform?
An Administrator wants to maximize the use of a network address. The network is 192.168.6.0/24 and there are three subnets that need to be created that can not overlap. Which subnet would you use for the network with 120 hosts? Requirements for the three subnets: Subnet 1: 3 host addresses Subnet 2: 25 host addresses Subnet 3: 120 host addresses
How does DevSecOps improve the Continuous Integration/Continuous Deployment (CI/CD) pipeline?
Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?
What are three benefits of the cloud native security platform? (Choose three.)
Which of these ports is normally associated with HTTPS?

Question 113 - PCCET discussion

Report
Export

Which type of IDS/IPS uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt?

A.
Knowledge-based
Answers
A.
Knowledge-based
B.
Signature-based
Answers
B.
Signature-based
C.
Behavior-based
Answers
C.
Behavior-based
D.
Database-based
Answers
D.
Database-based
Suggested answer: C

Explanation:

IDSs and IPSs also can be classified as knowledge-based (or signature-based) or behavior-based (or statistical anomaly-based) systems:

A knowledge-based system uses a database of known vulnerabilities and attack profiles to identify intrusion attempts. These types of systems have lower false-alarm rates than behavior-based systems but must be continually updated with new attack signatures to be effective.

A behavior-based system uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt.

These types of systems are more adaptive than knowledge-based systems and therefore may be more effective in detecting previously unknown vulnerabilities and attacks, but they have a much higher false-positive rate than knowledge-based systems

Show Answer
asked 23/09/2024
Carlos Eduardo Araujo Fonseca
38 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms