Which of the following best describes an intrusion prevention system?
A) Passive device that analyzes network traffic to detect unauthorized access
B) Active device that sits inline with traffic flow and can respond to intrusions by disabling the connection, dropping the packet, or deleting the malicious content
C) A software or hardware device that can filter incoming or outgoing traffic based on specific rules
D) A device that monitors the characteristics of a single host and the events occurring on that host

Question

Quizplus · Accepted Answer

An intrusion prevention system (IPS) is an active device that is placed inline with network traffic. Unlike passive intrusion detection systems (IDS) that only detect and alert on potential threats, an IPS can take immediate action to prevent or mitigate these threats by blocking the connection, dropping malicious packets, or removing harmful content, thereby providing a higher level of security.

Which of the Following Best Describes an Intrusion Prevention System