Which of the following is FALSE about IDSs?
A) IDSs log all suspicious activity but only create alarms for some suspicious activities.
B) IDSs tend to generate far too many false alarms.
C) IDSs are highly processing-intensive.
D) IDSs use stateful packet inspection.

Question

Quizplus · Accepted Answer

Intrusion Detection Systems (IDSs) primarily analyze network or system activities for malicious activities or policy violations. While they can be processing-intensive due to the volume of data they analyze and indeed may generate many false alarms, not all IDSs use stateful packet inspection. Stateful packet inspection is more characteristic of firewalls rather than IDSs, which often use a variety of methods including signature-based detection, anomaly detection, and others to identify suspicious activities.

Which of the Following Is FALSE About IDSs