If a packet is highly suspicious but not a provable attack packet,a(n)________ may drop it.
A)SPI firewall
B)IDS
C)IPS
D)all of the above

Question

Quizplus · Accepted Answer

An IPS (Intrusion Prevention System) is best suited for dropping highly suspicious packets that may not be provable attack packets. An IDS (Intrusion Detection System) only alerts administrators about incoming suspicious packets but does not take action to drop them. A SPI (Stateful Packet Inspection) firewall only inspects the data flow based on packet header information and does not have the capability to analyze deep packet content for identifying attacks.

If a Packet Is Highly Suspicious but Not a Provable