What are two drawbacks to using HIPS? (Choose two.)
- With HIPS, the network administrator must verify support for all the different operating systems used in the network.
- HIPS installations are vulnerable to fragmentation attacks or variable TTL attacks.
- HIPS has difficulty constructing an accurate network picture or coordinating events that occur across the entire network.
- If the network traffic stream is encrypted, HIPS is unable to access unencrypted forms of the traffic.
- With HIPS, the success or failure of an attack cannot be readily determined.
| Explanation & Hint:
Two disadvantages of deploying HIPS are (1) that it cannot create a complete view of the network or have knowledge of events that might be occurring beyond an individual host and (2) every host operating system within the organization must be supported. However, an advantage of using HIPS is that it can monitor and protect the operating system as well as critical system processes on each network host. |