When comparing host based IDS with network based ID, which of the following is an obvious
advantage?
A.
It is unaffected by switched networks.
B.
It cannot analyze encrypted information.
C.
It is not costly to setup.
D.
It is not costly to manage.
Explanation:
Host-based IDSs are unaffected by switched networks. When Host-based IDSs operate on OS
audit trails, they can help detect Trojan horse or other attacks that involve software
integrity breaches. These appear as inconsistencies in process execution.