Which tool is a Security Onion integrated host-based intrusion detection system?
- Snort
- OSSEC
- ELK
- Sguil
Explanation: OSSEC is a host-based intrusion detection system (HIDS) that is integrated into Security Onion and actively monitors host system operation.
Related exam: Checkpoint Exam: Analyzing Security Data Group Exam
Related exam: CCNA Cyber Ops Chapter 12 Exam Answers
Case 2:
Which tool is a Security Onion integrated host-based intrusion detection system?
- Wazuh
- Suricata
- Snort
- Zeek
Explanation: Wazuh is a HIDS that will replace OSSEC in Security Onion. It is a full-featured solution that provides a broad spectrum of endpoint protection mechanisms including host logfile analysis, file integrity monitoring, vulnerability detection, configuration assessment, and incident response.
Related exam: CyberOps Associate (Version 1.0) - Module 26: Evaluating Alerts Quiz Answers
Related exam: Network Defense Module 11.3.2 Evaluating Alerts Quiz
