PCI SSCPCI DSSMonitoring TestingEASYFree question
What is the purpose of an Intrusion Detection System (IDS) in PCI DSS?
- A.To scan externally facing IP addresses for known vulnerabilities and deliver a quarterly compliance report to the acquiring bank
- B.To block malicious packets at the network edge and drop sessions that match attack signatures
- C.To monitor network traffic and/or system activities for malicious behavior and alert security personnel
- D.To compare file hashes with approved baselines and notify administrators of unexpected changes
Why C is correct
IDS monitors network traffic and system activities to detect suspicious behavior and alert security teams to potential compromises of the CDE.
Know someone studying for PCI DSS? Send them this one.