When Deploying an Intrusion Prevention System (IPS) the BEST Way

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it___________

A) In-lie and turn on alert mode to stop malicious traffic.
B) In promiscuous mode and block malicious traffic.
C) In promiscuous mode and only detect malicious traffic.
D) In-line and turn on blocking mode to stop malicious traffic.