A security administrator is trying to eradicate a worm, which is spreading throughout the organization, using an old remote vulnerability in the SMB protocol. The worm uses Nmap to identify target hosts within the company. The administrator wants to implement a solution that will eradicate the current worm and any future attacks that may be using zero-day vulnerabilities. Which of the following would BEST meet the requirements when implemented?

Question

Quizplus · Accepted Answer

A network-based intrusion prevention system (NIPS) can detect and block malicious activities, including worms exploiting vulnerabilities, in real-time across the network, providing protection against both known and zero-day threats.

A Security Administrator Is Trying to Eradicate a Worm, Which