1.

At which two traffic layers do most commercial IDSes generate signatures?(a) Application layer and Network layer(b) Network layer and Session Layer(c) Transport layer and Application layer(d) Transport layer and Network layerI had been asked this question in exam.Question is taken from Intrusion Detection Systems topic in division Point to Point Protocol & Error Detection of Computer Network

Answer»

Right choice is (d) TRANSPORT layer and Network layer

The best explanation: Most COMMERCIAL IDSes generate signatures at the network and transport LAYERS. These signatures are used to ensure that no malicious operation is contained in the traffic. Nemean generates signature at APPLICATION and session layer.



Discussion

No Comment Found

Related InterviewSolutions