What term describes a set of rules used by an IDS or IPS to detect typical intrusion activity?

Last Updated: May 23, 2021
IT Exam Items Repository › Category: CCNA Security › What term describes a set of rules used by an IDS or IPS to detect typical intrusion activity?

What term describes a set of rules used by an IDS or IPS to detect typical intrusion activity?

  • definition
  • trigger
  • signature
  • event file

Explanation: A signature is a set of rules that an IDS and an IPS use to detect typical intrusion activity, such as DoS attacks. These signatures uniquely identify specific worms, viruses, protocol anomalies, and malicious traffic​.

Related exam: CCNA Security Practice Final Exam Answers
Related exam: Module 12: Quiz – IPS Operation and Implementation Network Security

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.