Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first?
A)Messages from the IDS are routed to the network security team
B)The IDS warns the firewall of suspicious traffic
C) The network router sends traffic to the firewall as well as to the IDS
D) Network security team decides to block traffic from that IP address

Question

Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first?
A)​Messages from the IDS are routed to the network security team
B)​The IDS warns the firewall of suspicious traffic
C) The network router sends traffic to the firewall as well as to the IDS
D) Network security team decides to block traffic from that IP address

Quizplus · Accepted Answer

The network router sends traffic to both the firewall and the IDS simultaneously, allowing them to work in conjunction to detect and respond to any suspicious activity. This is the first step in the process. Messages may be sent to the security team and actions may be taken based on the detection, but these occur after the initial detection and analysis by the IDS and firewall.

Assume Your Organization Is Experiencing an Intruder Attack