Certified Cloud Security Professional (CCSP) — Question 89

Which of the following is NOT something that an HIDS will monitor?

Answer options

• A. Configurations
• B. User logins
• C. Critical system files
• D. Network traffic

Correct answer: B

Explanation

An HIDS (Host Intrusion Detection System) is designed to monitor and analyze the activities and configurations of a host machine, including critical system files and configurations. However, it does not typically monitor user logins, as that is usually the domain of other security systems like SIEMs or user activity monitoring tools. Network traffic is also outside the scope of HIDS, which focuses solely on the host.