Match each Intrusion Detection/Prevention System (IDS/IPS) technology or deployment mode on the left with its corresponding operational characteristic on the right.
- Signature-Based DetectionCompares network traffic directly against a repository of known exploit patterns and byte strings.
- Anomaly-Based DetectionEstablishes a baseline of standard network behavior to identify statistical deviations and novel attacks.
- Inline NIPS DeploymentSits in-band within the live traffic flow to actively drop malicious packets in real time.
- Out-of-Band NIDS DeploymentReceives mirrored traffic from a SPAN port or network TAP to inspect activity passively without introducing latency.
Cevap
Signature-Based Detection matches with comparing traffic against known exploit patterns. Anomaly-Based Detection matches with establishing a baseline of standard behavior to identify statistical deviations. Inline NIPS Deployment matches with sitting in-band within live traffic to actively drop malicious packets. Out-of-Band NIDS Deployment matches with receiving mirrored traffic via SPAN/TAP to inspect activity passively without introducing latency.
Each IDS/IPS technology and deployment mode is accurately matched with its operational profile: Signature-based detection relies on known attack signatures. Anomaly-based detection flags deviations from a baseline of normal activity. Inline NIPS resides directly in the traffic stream (in-band) to actively block threats. Out-of-band NIDS passively monitors copied traffic from a SPAN or TAP without introducing latency.
Adım Adım Çözüm
Anahtar Kavram
Intrusion Detection and Prevention System (IDS/IPS) Detection Logic and Network Topology Placement