210-260 Question #88: Real Exam Question with Answer & Explanation

The correct answer is A: Inline, behind the internet router and firewall. Cisco IOS Intrusion Prevention System (IPS) is an inline, deep-packet-inspection-based feature that enables Cisco IOS Software to effectively mitigate a wide range of network attacks. While it is common practice to defend against attacks by inspecting traffic at the data centers

Question

Which option is the most effective placement of an IPS device within the infrastructure?

Options

AInline, behind the internet router and firewall
BInline, before the internet router and firewall
CPromiscuously, after the Internet router and before the firewall
DPromiscuously, before the Internet router and the firewall

Explanation

Cisco IOS Intrusion Prevention System (IPS) is an inline, deep-packet-inspection-based feature that enables Cisco IOS Software to effectively mitigate a wide range of network attacks. While it is common practice to defend against attacks by inspecting traffic at the data centers and corporate headquarters, it is also critical to distribute the network-level defense to stop malicious traffic close to its entry point at the branch or telecommuter offices. system-ips/prod_white_paper0900aecd8062acfb.html

Community Discussion

No community discussion yet for this question.

Full 210-260 Practice