The use of alert thresholding in an IDS can reduce the volume of repeated alerts,...

GAQM CPEH-001 Question Answer

The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?

An attacker, working slowly enough, can evade detection by the IDS.

Network packets are dropped if the volume exceeds the threshold.

Thresholding interferes with the IDS’ ability to reassemble fragmented packets.

The IDS will not distinguish among packets originating from different sources.

CPEH-001 PDF/Engine

Get 60% Discount on All Products, Use Coupon: "8w52ceb345"