Which of the following is an IDPS security best practice?
A) to prevent false positives, only test the IDPS at initial configuration
B) communication between IDPS components should be encrypted
C) all sensors should be assigned IP addresses
D) log files for HIDPSs should be kept local

Question

Quizplus · Accepted Answer

Communication between IDPS components should be encrypted to prevent attackers from eavesdropping and tampering with the data. The other choices are not best practices. False positives can occur anytime, and regular testing is essential to detect and mitigate them. Assigning IP addresses to sensors is already a standard practice, and having local log files for HIDPSs can make it difficult to centralize log management for forensic analysis and incident response purposes.

Which of the Following Is an IDPS Security Best Practice