Home > IT Networking > Quizzes > Computer Networks Practice Test: Intrusion Detection Systems
Computer Networks Practice Test: Intrusion Detection Systems
Fast practice, instant feedback. Timer auto-submits when time’s up.
Avg score: 0% Most missed: “Which of the following is an advantage of anomaly detection?”

An intrusion detection system (IDS) is a network security tool that monitors network traffic and devices for suspicious activity. IDSs can be software applications or dedicated hardware devices connected to the network. 

There are five types of IDSs:
Network-based: Monitors a complete protected network
Host-based: Monitors network traffic and system logs to and from a single device
Protocol-based
Application protocol-based
Hybrid 

Computer Networks Practice Test: Intrusion Detection Systems
Time left 00:00
10 Questions

1. Which of the following is used to provide a baseline measure for comparison of IDSes?
2. Which of the following is true of signature-based IDSes?
3. At which two traffic layers do most commercial IDSes generate signatures?
4. A false positive can be defined as ________
5. Which of the following is an advantage of anomaly detection?
6. One of the most obvious places to put an IDS sensor is near the firewall. Where exactly in relation to the firewall is the most productive placement?
7. “Semantics-aware” signatures automatically generated by Nemean are based on traffic at which two layers?
8. IDS follows a two-step process consisting of a passive component and an active component. Which of the following is part of the active component?
9. When discussing IDS/IPS, what is a signature?
10. What is the purpose of a shadow honeypot?