Eccouncil Discussions

Exam 312-50v10 All Questions

View all questions & answers for the 312-50v10 exam

Go to Exam

Exam 312-50v10 topic 1 question 104 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 104
Topic #: 1

[All 312-50v10 Questions]

Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends "many" IP packets, based on the average number of packets sent by all origins and using some thresholds.
In concept, the solution developed by Bob is actually:

A. Just a network monitoring tool
B. A signature-based IDS
C. A hybrid IDS
D. A behavior-based IDS

Show Suggested Answer

Suggested Answer: A 🗳️

by guidoleonardo at Oct. 29, 2020, 10:23 a.m.

Comments

Submit Cancel

4bd3116

12 months ago

Selected Answer: D

is a behavior-based

upvoted 1 times

...

ffactor

1 year, 9 months ago

I'm guessing behavior based IDS. It is producing an alert when the traffic deviates from baseline.

upvoted 1 times

...

avd12345

3 years, 7 months ago

Monitor network and raise alerts -> so it should be IDS

upvoted 1 times

...

beowolf

3 years, 11 months ago

Read the question. Answer is there in the question. Monitor network. Not IDS.

upvoted 1 times

...

guidoleonardo

4 years, 8 months ago

I was pretty sure that the answer were "D"

upvoted 4 times

MagicianRecon

4 years, 8 months ago

seems to be IDS to me as well

upvoted 2 times

...

Castoret

4 years, 7 months ago

I guess that an IDS is much more than a traffic monitoring but "in concept" I would also say "D"

upvoted 1 times

...

MeganONO

4 years, 4 months ago

I would also have said "D".

upvoted 1 times

...

...