試験212-82-JPN トピック4 問題52 スレッド
ECCouncil 212-82-JPNのリアル試験問題集
問題 #: 52
トピック #: 4
問題 #: 52
トピック #: 4
大手金融機関である SecuraCorp は、ゼロデイ脆弱性を懸念しています。ネットワーク インフラストラクチャが広範に広がり、トランザクション ポイントが複数あるため、シグネチャだけに頼るのではなく、ネットワークの動作に基づいて疑わしいパターンを効果的に識別できるシステムが必要です。SecuraCorp は、自社のニーズに合わせて、主にどのタイプの IDS/IPS を導入すべきでしょうか。
おすすめの解答：B 解答を投票する
SecuraCorp needs an Intrusion Detection System (IDS) that can identify suspicious patterns based on behavior rather than relying solely on known signatures. Here's why an Anomaly-based IDS is the best fit:
* Anomaly-based IDS:
* Behavior Analysis: Detects deviations from normal network behavior, which is crucial for identifying zero-day vulnerabilities.
* Pattern Recognition: Uses machine learning and statistical methods to identify unusual patterns that might indicate malicious activity.
* Advantages: Effective against unknown threats and zero-day exploits because it does not rely on predefined signatures.
* Network-based IDS: Primarily monitors network traffic but often relies on signatures, making it less effective against unknown threats.
* Signature-based IDS: Relies on a database of known attack signatures, which is not sufficient for detecting new or unknown threats.
* Host-based IDS: Monitors individual systems but might not provide a comprehensive view of the network.
References:
* EC-Council Certified Security Analyst (ECSA) materials.
* Anomaly-based IDS:
* Behavior Analysis: Detects deviations from normal network behavior, which is crucial for identifying zero-day vulnerabilities.
* Pattern Recognition: Uses machine learning and statistical methods to identify unusual patterns that might indicate malicious activity.
* Advantages: Effective against unknown threats and zero-day exploits because it does not rely on predefined signatures.
* Network-based IDS: Primarily monitors network traffic but often relies on signatures, making it less effective against unknown threats.
* Signature-based IDS: Relies on a database of known attack signatures, which is not sufficient for detecting new or unknown threats.
* Host-based IDS: Monitors individual systems but might not provide a comprehensive view of the network.
References:
* EC-Council Certified Security Analyst (ECSA) materials.
瑠川** 2026-07-28 12:17:50
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。