212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ66

Network Security Controls

You are the lead cybersecurity analyst for a multinational corporation that handles sensitive financial data. As part of your network security strategy, you have deployed both an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS) to defend against cyber threats.

One day, the IDS alerts you to suspicious network activity, indicating a possible intrusion attempt from an external source. Meanwhile, the IPS immediately blocks the malicious traffic before it can move deeper into the network.

Based on this scenario, what primarily differentiates the IDS role from the IPS role in your network security architecture?

  • A The IDS operates solely at the network perimeter, while the IPS can also monitor and protect internal network traffic.
  • B The IDS requires manual intervention for threat mitigation, while the IPS can autonomously respond to threats without human intervention.
  • C The IDS focuses on identifying suspicious activities and generating alerts, while the IPS actively blocks and mitigates potential threats in real-time.
  • D The IDS primarily uses signature-based detection techniques, while the IPS relies primarily on anomaly-based detection methods.
Explanation

An IDS detects suspicious or malicious activity and alerts security personnel or other systems. An IPS is designed to take active preventive action, such as blocking malicious traffic in real time, to stop or reduce the threat.

Community Discussion

No comments yet. Be the first to start the discussion!