Which tool is designed primarily to log network traffic and examine it for known attack patterns?

Which tool is designed primarily to log network traffic and examine it for known attack patterns?

• A. Intrusion Detection System (IDS)
• B. Firewall
• C. Antivirus software
• D. Packet sniffer

Answer: (A)

Detecting malicious activity by analyzing network traffic for known attack patterns. An intrusion detection system is built to log network traffic and compare it against signatures or behavioral patterns of attacks, then generate alerts when a match is found. This focus on detecting and flagging suspicious activity sets it apart from other tools: a firewall primarily enforces access controls by allowing or blocking traffic, not by actively analyzing traffic for known attack patterns; antivirus software targets malware on individual hosts; and a packet sniffer captures and displays traffic but doesn’t inherently detect or alert on attacks.

Detecting malicious activity by analyzing network traffic for known attack patterns. An intrusion detection system is built to log network traffic and compare it against signatures or behavioral patterns of attacks, then generate alerts when a match is found. This focus on detecting and flagging suspicious activity sets it apart from other tools: a firewall primarily enforces access controls by allowing or blocking traffic, not by actively analyzing traffic for known attack patterns; antivirus software targets malware on individual hosts; and a packet sniffer captures and displays traffic but doesn’t inherently detect or alert on attacks.