Which of the following would not be considered suspicious behavior by an intrusion detection system (IDS)?

An employee accesses a file they are authorized to view during business hours

A user tries to access a password file

A large amount of data is sent somewhere outside of the network

An employee is on vacation, but somebody is accessing the network from their account

Choose an option

1 answer

The option that would not be considered suspicious behavior by an intrusion detection system (IDS) is:

An employee accesses a file they are authorized to view during business hours.

This action is within normal behavior as it involves authorized access during appropriate times. The other options indicate potential security issues or unauthorized access that are likely to trigger alerts from an IDS.