ExamGecko
Home Home / ISC / CCSP
Question list
Search
Search

Question 369 - CCSP discussion

Report
Export

A variety of security systems can be integrated within a network--some that just monitor for threats and issue alerts, and others that take action based on signatures, behavior, and other types of rules to actively stop potential threats.

Which of the following types of technologies is best described here?

A.
IDS
Answers
A.
IDS
B.
IPS
Answers
B.
IPS
C.
Proxy
Answers
C.
Proxy
D.
Firewall
Answers
D.
Firewall
Suggested answer: B

Explanation:

An intrusion prevention system (IPS) can inspect traffic and detect any suspicious traffic based on a variety of factors, but it can also actively block such traffic.

Although an IDS can detect the same types of suspicious traffic as an IPS, it is only design to alert, not to block. A firewall is only concerned with IP addresses, ports, and protocols; it cannot be used for the signature-based detection of traffic. A proxy can limit or direct traffic based on more extensive factors than a network firewall can, but it's not capable of using the same signature detection rules as an IPS.

asked 18/09/2024
Jacquezz Shorter
23 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first