CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ34

Incident Management

Which of the following represents the GREATEST benefit of using a network-based intrusion prevention system (IPS)?

  • A The ability to review and monitor data streams by network segment
  • B The ability to shut down or block suspicious connections
  • C Increased visibility into user web surfing
  • D Centralized controls for incident handling
Explanation

A network-based IPS can operate inline and automatically stop detected threats by blocking suspicious connections, providing active prevention rather than only monitoring or visibility.

Community Discussion

No comments yet. Be the first to start the discussion!