Examkin

Question

Difficulty: EasyIntrusion Detection and Prevention Systems (IDS/IPS)

A network administrator needs to deploy a security solution that can analyze network traffic in real time and automatically drop malicious packets before they reach the internal network. Which system type and deployment mode best meets this requirement?

  1. An inline Network Intrusion Prevention System (NIPS)Answer
  2. B
    A passive Network Intrusion Detection System (NIDS) connected to a switch SPAN port
  3. C
    A Host-based Intrusion Detection System (HIDS) installed on the network router
  4. D
    A port-based Network Intrusion Detection System (NIDS) configured for passive monitoring

Answer

An inline Network Intrusion Prevention System (NIPS) is the correct choice because placing a prevention system in-band enables active dropping of malicious traffic in real time.
An inline Network Intrusion Prevention System (NIPS) sits directly in the communication path (in-band). This placement allows it to evaluate live traffic and immediately block, reset, or drop malicious network traffic before it penetrates the internal network.

Step-by-Step Solution

1
Identify the required operational capability from the scenario.
The requirement specifies that the system must automatically drop malicious packets in real time.
Active mitigation requires an inline prevention mechanism rather than passive detection.
2
Determine the necessary placement and device type.
Selecting a Network Intrusion Prevention System (NIPS) deployed in-band (inline).
An inline NIPS processes traffic as it passes through the device, granting the authority to drop blocked packets before they reach internal targets.

Key Concept

Inline NIPS vs. Passive NIDS Deployment
Rate this question

Topics

Intrusion Detection and Prevention Systems (IDS/IPS)

More questions from this topic