IDS is used to do what?

• A. Monitor and detect intrusions
• B. Encrypt traffic
• C. Manage keys
• D. Provide user authentication

Answer: (A)

An Intrusion Detection System is designed to monitor network or host activity to detect signs of unauthorized or malicious behavior. It analyzes traffic, logs, and events for known attack patterns (signatures) or unusual activity (anomalies) and then generates alerts or forwards findings to a security team or SIEM for investigation. This detection and alerting focus is what sets IDS apart from tools that encrypt traffic, manage cryptographic keys, or handle user authentication—those functions belong to encryption, key management, and authentication services. So the best use of an IDS is to monitor and detect intrusions and notify defenders so they can respond.