Which category of security tool monitors network traffic for signs of malicious activity and generates alerts?
- A.Load balancer
- B.Intrusion Detection System (IDS)
- C.VPN
- D.Firewall
Why B is correct
An IDS monitors network traffic or system activity for malicious behavior and generates alerts. Network-based IDS (NIDS) like Snort/Suricata analyze network traffic. Host-based IDS (HIDS) like OSSEC monitor system files and logs. IDS detects but doesn't block - IPS (Intrusion Prevention System) adds blocking capability.
Know someone studying for Security Fundamentals? Send them this one.