CISSP_Candidate
08-29-2006, 11:17 AM
Which of the following is a resonable reponse from a network based IDS when it detects IP packets where the IP source is the same as the IP destination address?
A. The IDS will record the event
B. The IDS will reset the TCP connection
C. The IDS will correct the destination address and process the packet
D. The IDS will work with the NAT device to translate the source address and forward the packet.
I know that in some cases an IDS can facilitate the mitigation.. for some reason I want to say the answer is A. What's the best answer?
A. The IDS will record the event
B. The IDS will reset the TCP connection
C. The IDS will correct the destination address and process the packet
D. The IDS will work with the NAT device to translate the source address and forward the packet.
I know that in some cases an IDS can facilitate the mitigation.. for some reason I want to say the answer is A. What's the best answer?