Certified Information Systems Security Professional (CISSP) — Question 178

Which of the following BEST describes an example of evading intrusion detection system (IDS) signature detection?

Answer options

• A. Packet fragmentation
• B. SQL injection (SQLi)
• C. Cross-Site Scripting (XSS)
• D. Encoding

Correct answer: A

Explanation

Packet fragmentation is a technique used to break down packets into smaller pieces, which can help evade signature-based detection by IDS. The other options, such as SQL injection and Cross-Site Scripting, are attacks that may be detected by IDS without specifically evading their signatures, while encoding can be used as an obfuscation method rather than a direct evasion technique.