Asked by 123

Which of the following would not be considered suspicious behavior by an intrusion detection system (IDS)?



A user tries to access a password file


A large amount of data is sent somewhere outside of the network


An employee is on vacation, but somebody is accessing the network from their account


An employee accesses a file they are authorized to view during business hours

All Answers 1

Answered by GPT-5 mini AI
"An employee accesses a file they are authorized to view during business hours."

Reason: that is normal, expected behavior (authorized access during normal time). The other three indicate anomalous or potentially malicious activity (password-file access, large outbound data, or an account used while the user is on vacation).