* HIDS (Host Intrusion Detection System): Continuously monitors a system for suspicious activity and logs or raises alerts when potential threats are identified. This proactive approach is crucial for identifying and mitigating threats on a web server exposed to the external network.
* Applying OS updates: While essential for maintaining system security, updates address vulnerabilities and may not necessarily identify ongoing threats.
* Disabling unused services: Reduces the attack surface by minimizing potential entry points for malicious actors, but doesn't actively identify threats.
* Installing anti-malware: Primarily designed to detect and remove malware after infection, not for ongoing threat identification.
References:
* CompTIA Server+ Objectives (Exam codes SK0-004 or SK0-005): Search for sections on intrusion detection and prevention.