Which of the following would assist the most in Host Based intrusion detection?

Which of the following would assist the most in Host Based intrusion detection?
A .  audit trails.
B .  access control lists.
C .  security clearances.
D .  host-based authentication.

View Answer

Answer: A

Explanation: To assist in Intrusion Detection you would review audit logs for access violations.

The following answers are incorrect:

access control lists. This is incorrect because access control lists determine who has access to what but do not detect intrusions.

security clearances. This is incorrect because security clearances determine who has access to what but do not detect intrusions.

host-based authentication. This is incorrect because host-based authentication determine who have been authenticated to the system but do not dectect intrusions.