An IDS can gather evidence on intrusive activity such as an attack or penetration attempt. Identifying weaknesses in the policy definition is a limitation of an IDS. Choices C and D are features of firewalls, while choice B requires a manual review, and therefore is outside the functionality of an IDS.

Date and time-stamp reviews of source and object code would ensure that source code, which has been compiled, matches the production object code. This is the most effective way to ensure that the approved production source code is compiled and is theone being used.

Section: Protection of Information Assets
Explanation:
A directory server makes other users' certificates available to applications. Encrypting the information
transmitted over the network and storing certificate revocation lists (CRLs) are roles performed by a
security server. Facilitating the implementation of a password policy is not relevant to public key
infrastructure (PKl).

Section: Information System Operations, Maintenance and Support