Which technology would you use to monitor networks and alert on intrusions?

Which technology would you use to monitor networks and alert on intrusions?

• A. IDS
• B. Fiddler
• C. CxSAST
• D. ESP

Answer: (A)

Monitoring real-time network activity to detect unauthorized or malicious actions is the job of an intrusion detection system. It analyzes traffic across the network, looks for known attack signatures or abnormal behavior, and raises alerts so analysts can investigate. This makes it ideal for alerting on intrusions and guiding incident response, often feeding into security information and event management systems. The other options don’t fit this function as well. A web debugging proxy like Fiddler focuses on inspecting and debugging HTTP/S traffic for web applications, not on broad network intrusion detection. A static code analysis tool like CxSAST scans source code for vulnerabilities, not network activity. ESP isn’t the standard technology for monitoring networks and generating intrusion alerts.

Monitoring real-time network activity to detect unauthorized or malicious actions is the job of an intrusion detection system. It analyzes traffic across the network, looks for known attack signatures or abnormal behavior, and raises alerts so analysts can investigate. This makes it ideal for alerting on intrusions and guiding incident response, often feeding into security information and event management systems.

The other options don’t fit this function as well. A web debugging proxy like Fiddler focuses on inspecting and debugging HTTP/S traffic for web applications, not on broad network intrusion detection. A static code analysis tool like CxSAST scans source code for vulnerabilities, not network activity. ESP isn’t the standard technology for monitoring networks and generating intrusion alerts.