200-201 Question 92

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  The answer is A. Host-based intrusion detection (HIDS) is a security system that monitors a computer system for malicious activity or policy violations. HIDSs can be used to detect a variety of threats, including unauthorized access, malware, and data exfiltration. Systems-based sandboxing is a security technique that isolates applications in a controlled environment to prevent them from causing harm to the host system. Host-based firewall is a security system that controls incoming and outgoing network traffic on a host system. Antivirus is a software application that detects and removes malware from a computer system.

• Chose A1

  Keyword: "Monitors" - It is an IDS function. - An Intrusion Detection System (IDS) is a device or software application that monitors a network or systems for malicious activity or policy violations. - A host based firewall does not monitor local system operations. A firewall is no more than an ACL matching traffic in and out of a system based on how it's configured.

• Chose A2

  A. is the best answer HIDS is capable of monitoring the internals of a computing system as well as the network packets on its network interfaces. Host-based firewall is a piece of software running on a single Host that can restrict incoming and outgoing Network activity for that host only.