Which component of an IDS examines the collected network traffic and compares it to known patterns of suspicious or malicious activity?
A)Traffic collector
B)Analysis engine
C)Signature database
D)Examination collector

Question

Quizplus · Accepted Answer

The analysis engine is responsible for examining the collected network traffic and comparing it to known patterns of suspicious or malicious activity. The traffic collector is responsible for gathering the network traffic, the signature database contains the known patterns of suspicious or malicious activity, and there is no such component as an examination collector.

Which Component of an IDS Examines the Collected Network Traffic