Discuss About Network IDS Scanning Traffic To Match Attack Patterns

Question

1. A network-based IDS that scans packet traffic to try to match known attack patterns is called a signature-based NIDS.  

2. Which of the following is a limitation of Snort?

a. Cannot be centrally monitored with sensors running on different OSes

b. Cannot protect against insider threats

c. Cannot inspect encrypted traffic for attack signatures

d. Cannot scale effectively to protect a large network

e. Cannot detect application-layer attacks

Summary

This true or false and multiple choice questions belong to Computer Science and they discuss about network based IDS scanning packet traffic to try to match known attack patterns.

Total Word Count NA