ABC Inc. offers a number of services though its web site. During one day, senior executives of ABC Inc. were surprised to discover that sensitive data on their servers were being leaked to unauthorized individuals on the Internet. Postincident investigations revealed that ABC Inc. 's key servers were infected with a Trojan. The incident occurred after deployment of a newly acquired module from a software vendor, which was tested on test servers in accordance with functional specifications. The incident had gone unnoticed for a period of about four weeks. A potential cause of the leak may have been malware embedded in the new module. Which of the following measures could have prevented communication to dubious hosts?

A. Encryption of server data

B. Updated antivirus software

C. Intrusion detection/intrusion prevention systems (IDSs/IPSs)

D. Secure sockets layer (SSL) / transport layer security (TLS)

Question

Moshe James

Business

4 March, 23:43

ABC Inc. offers a number of services though its web site. During one day, senior executives of ABC Inc. were surprised to discover that sensitive data on their servers were being leaked to unauthorized individuals on the Internet. Postincident investigations revealed that ABC Inc. 's key servers were infected with a Trojan. The incident occurred after deployment of a newly acquired module from a software vendor, which was tested on test servers in accordance with functional specifications. The incident had gone unnoticed for a period of about four weeks. A potential cause of the leak may have been malware embedded in the new module. Which of the following measures could have prevented communication to dubious hosts?

A. Encryption of server data

B. Updated antivirus software

C. Intrusion detection/intrusion prevention systems (IDSs/IPSs)

D. Secure sockets layer (SSL) / transport layer security (TLS)

+5

Answers (1)

Know the Answer?

Graham Bentley · Answer 1

C) Intrusion detection / intrusion prevention systems (lDS/IPSs)

Explanation:

Intrusion prevention system (IPS) is a software that examines network traffic flow and searches for possible vulnerable exploits.

Intrusion detection system (IDS) is a software that monitors a network in search of malicious software that may pose a threat to the intranet's security, block it (or attempt to block it) and then report it.

Both systems, IPS and IDS, work together as parts of a network infrastructure.