CompTIA Security+ Exam Prep

Answer: D - Host-based detection systems (HIDS) can be installed on individual workstations or servers to watch for inappropriate or anomalous activity. HIDSs are usually used to make sure users do not delete system files, reconfigure important settings, or put the system at risk in any other way. Whereas the NIDS understands and monitors the network traffic, an HIDS is limited to the computer itself. The HIDS does not understand or review network traffic. HIDS products are installed only on critical servers (not on every system on the network) because of the resource overhead and the administration nightmare that such an installation would cause.