What term describes a set of rules used by an IDS or IPS to detect typical intrusion activity?
- event file
Explanation: A signature is a set of rules that an IDS and an IPS use to detect typical intrusion activity, such as DoS attacks. These signatures uniquely identify specific worms, viruses, protocol anomalies, and malicious traffic.
More Questions: CCNA Security Practice Final Exam Answers
More Questions: Module 12: Quiz – IPS Operation and Implementation Network Security