Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Location Chicago IL, USA

Exam 312-50v10 topic 1 question 104 discussion

Actual exam question from ECCouncil's 312-50v10
Question #: 104
Topic #: 1
[All 312-50v10 Questions]

Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends "many" IP packets, based on the average number of packets sent by all origins and using some thresholds.
In concept, the solution developed by Bob is actually:

  • A. Just a network monitoring tool
  • B. A signature-based IDS
  • C. A hybrid IDS
  • D. A behavior-based IDS
Show Suggested Answer Hide Answer

Suggested Answer: A


4 days, 13 hours ago
The word "many" implies a behavior.
upvoted 1 times
7 months, 2 weeks ago
I was pretty sure that the answer were "D"
upvoted 4 times
3 months, 4 weeks ago
I would also have said "D".
upvoted 1 times
6 months, 1 week ago
I guess that an IDS is much more than a traffic monitoring but "in concept" I would also say "D"
upvoted 1 times
7 months, 2 weeks ago
seems to be IDS to me as well
upvoted 2 times