Which category of security tool monitors network traffic for signs of malicious activity and generates alerts?
- A.A. Firewall
- B.C. VPN
- C.B. Intrusion Detection System (IDS)
- D.D. Load balancer
Why C is correct
An IDS monitors network traffic or system activity for malicious behavior and generates alerts. Network-based IDS (NIDS) like Snort/Suricata analyze network traffic. Host-based IDS (HIDS) like OSSEC monitor system files and logs. IDS detects but doesn't block - IPS (Intrusion Prevention System) adds blocking capability.
Know someone studying for Security Fundamentals? Send them this one.