Match each Intrusion Detection and Prevention System (IDS/IPS) detection logic or deployment mode on the left with its corresponding operational description on the right.
- Signature-based DetectionCompares inspected network traffic against a database of known attack patterns and exploit signatures.
- Anomaly-based DetectionEstablishes a baseline of normal network behavior and triggers alerts when abnormal activity occurs.
- Inline (In-band) DeploymentPlaced directly in the traffic flow to actively drop or terminate malicious connections in real time.
- Passive (Out-of-band) DeploymentMonitors mirrored network traffic from a TAP or SPAN port without adding latency to the primary data path.
Cevap
Signature-based Detection matches known attack pattern databases; Anomaly-based Detection matches baseline deviation monitoring; Inline Deployment actively drops live malicious traffic; Passive Deployment monitors mirrored traffic off the main path via TAP/SPAN ports.
Each concept correctly aligns with its detection logic or placement mode. Signature-based detection checks known threat patterns, anomaly-based detection flags baseline deviations, inline placement allows live packet dropping, and out-of-band placement analyzes mirrored network traffic.
Adım Adım Çözüm
Anahtar Kavram
IDS/IPS Detection Mechanisms and Deployment Topologies