PDA

View Full Version : IDS question


CISSP_Candidate
08-29-2006, 11:17 AM
Which of the following is a resonable reponse from a network based IDS when it detects IP packets where the IP source is the same as the IP destination address?

A. The IDS will record the event
B. The IDS will reset the TCP connection
C. The IDS will correct the destination address and process the packet
D. The IDS will work with the NAT device to translate the source address and forward the packet.

I know that in some cases an IDS can facilitate the mitigation.. for some reason I want to say the answer is A. What's the best answer?

Jescoi
08-29-2006, 11:18 AM
Answer is A. IDS is passive only records. Answer is A. Also I took the class and this is a practice question.