ICS/SCADA Cybersecurity — Question 19

Which type of Intrusion Prevention System can monitor and validate encrypted data?

Answer options

• A. Memory
• B. Network
• C. Host
• D. Anomaly

Correct answer: C

Explanation

The correct answer is C, Host, as it can inspect encrypted data at the endpoint level where decryption can occur. Options A (Memory), B (Network), and D (Anomaly) do not have the capability to directly monitor and validate encrypted data without access to the decryption process.