Study tips CISSP

What are the primary approaches IDS takes to analyze events to detect attacks?

The patterns corresponding to know attacks are called:

Which of the following is an obvious disadvantage of deploying misuse detectors?

What detectors identify abnormal unusual behavior on a host or network?

which of the following?

Which of the following usually provides reliable, real-time information without consuming network or host resources?

Which of the following would assist in intrusion detection?

Using clipping levels refers to:

what way can violation clipping levels assist in violation tracking and analysis?

which one of the following parameters is used to keep the quantity of data to manageable levels?