Which of the following would not be considered suspicious behavior by an intrusion detection system (IDS)?

Question

A user tries to access a password file

A large amount of data is sent somewhere outside of the network

An employee is on vacation, but somebody is accessing the network from their account

An employee accesses a file they are authorized to view during business hours

Answer 1

The behavior that would not be considered suspicious by an intrusion detection system (IDS) is:

An employee accesses a file they are authorized to view during business hours.

This action is typical behavior for an employee performing their job duties and does not raise any flags for suspicious activity, as long as the file is one that the employee has appropriate permissions to access. The other options involve actions that could indicate potential security threats or breaches.