Answer :
Logs are not a measure of the comparative effectiveness of an IPDS; they provide historical data for analysis after events, as opposed to components like alert settings and blacklists, which help determine when to flag activities as potential threats. Option (3) is correct.
Of the options provided, measuring the comparative effectiveness of an Intrusion Prevention and Detection System (IPDS) is not achieved by analyzing logs. Alert settings, thresholds, blacklists, and whitelists are all components that can help an IPDS determine when to flag activities as potential security threats and respond to them accordingly. Logs, on the other hand, are records of events that have occurred within the system, providing historical data used for analysis after an event rather than determining the effectiveness of the IPDS in real-time.
