Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Location Chicago IL, USA
Menu
Eccouncil Discussions

Exam 312-50v10 topic 1 question 104 discussion

Actual exam question from ECCouncil's 312-50v10
Question #: 104
Topic #: 1
[All 312-50v10 Questions]

Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends "many" IP packets, based on the average number of packets sent by all origins and using some thresholds.
In concept, the solution developed by Bob is actually:

  • A. Just a network monitoring tool
  • B. A signature-based IDS
  • C. A hybrid IDS
  • D. A behavior-based IDS
Show Suggested Answer Hide Answer

Suggested Answer: A

by guidoleonardo at Oct. 29, 2020, 10:23 a.m.

Comments

Submit Cancel
izim
4 days, 13 hours ago
The word "many" implies a behavior.
upvoted 1 times
...
guidoleonardo
7 months, 2 weeks ago
I was pretty sure that the answer were "D"
upvoted 4 times
MeganONO
3 months, 4 weeks ago
I would also have said "D".
upvoted 1 times
...
Castoret
6 months, 1 week ago
I guess that an IDS is much more than a traffic monitoring but "in concept" I would also say "D"
upvoted 1 times
...
MagicianRecon
7 months, 2 weeks ago
seems to be IDS to me as well
upvoted 2 times
...
...

SaveCancel