In an IDS, which component stores events logged by sensors in a database?

In an IDS, which component stores events logged by sensors in a database?

• A. Central engine
• B. Console
• C. Sensors
• D. Firewall

Answer: (A)

The main concept is how data moves and is stored in an IDS architecture. Sensors generate events from network and host activity and send them to a central component. This central engine is responsible for processing those events, applying detection rules, correlating related activity, and storing the logged events in a database for later analysis and reporting. The console provides a user interface to view and manage data but doesn’t typically serve as the long-term storage location. A firewall isn’t part of the IDS data collection and storage flow in this context. So, the component that stores events logged by sensors in a database is the central engine.

The main concept is how data moves and is stored in an IDS architecture. Sensors generate events from network and host activity and send them to a central component. This central engine is responsible for processing those events, applying detection rules, correlating related activity, and storing the logged events in a database for later analysis and reporting. The console provides a user interface to view and manage data but doesn’t typically serve as the long-term storage location. A firewall isn’t part of the IDS data collection and storage flow in this context. So, the component that stores events logged by sensors in a database is the central engine.