Question $37$

$1$ pts

When performing an investigation triggered by a NIDS$/$NIPS$,$ what should we anticipate as a likely deficiency of the NIDS$/$NIPS as an event source?

Inability to reliably reconstruct the pattern of events that lead to the event's issuance

Inability to alert or $log$ the occurrences of illicit connections

Inability to analyze traffic that firewalls permit

Inflexibility in terms of changing detection to alert on events not currently being evaluated