Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
If the IDS cannot keep up with the amount of traffic, it will:
Let them all pass
Hold them all back
None of these
Selectively let them pass
Due to the fact that passive IDS are inherently fail-open (as opposed to fail-closed), launching a denial-of-service attack against the IDS on a network is a feasible method of circumventing its protection. An adversary can accomplish this by exploiting a bug in the IDS, consuming all of the computational resources on the IDS, or deliberately triggering a large number of alerts to disguise the actual attack. https://en.wikipedia.org/wiki/Intrusiondetectionsystemevasiontechniques EDIT: this doesn't say anything about "by default" and it configured to drop the traffic aka "hold them all back".
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.