Which one of the following is NOT a characteristic of an Intrusion Detection System? (IDS)
A.
Determines the source of incoming packets.
B.
Detects intruders attempting unauthorized activities.
C.
Recognizes and report alterations to data files.
D.
Alerts to known intrusion patterns.
Explanation:
Software employed to monitor and detect possible attacks and behaviors that vary
from the normal and expected activity. The IDS can be network-based, which monitors network
traffic, or host-based, which monitors activities of a specific system and protects system files and
control mechanisms. – Shon Harris All-in-one CISSP Certification Guide pg 932