Exam SSCP Topic 1 Question 1158 Discussion

Because a network-based IDS reviews packets and headers, denial of
service attacks can also be detected.
This question is an easy question if you go through the process of elimination. When you
see an answer containing the keyword: ALL It is something a give away that it is not the
proper answer. On the real exam you may encounter a few question where the use of the
work ALL renders the choice invalid. Pay close attention to such keyword.
The following are incorrect answers:
Even though most IDSs can detect some viruses and some password guessing attacks,
they cannot detect ALL viruses or ALL password guessing attacks. Therefore these two
answers are only detractors.
Unless the IDS knows the valid values for a certain dataset, it can NOT detect data
corruption.
Reference used for this question:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, 2001, John Wiley & Sons, Page 48.