nerdexam
EC-Council

212-89 · Question #50

An attack on a network is BEST blocked using which of the following?

The correct answer is A. IPS device inline. An Intrusion Prevention System (IPS) device placed inline is best suited to block attacks on a network actively. Being inline allows the IPS to analyze and take action on the traffic as it passes through the device, effectively preventing malicious traffic from reaching its…

Incident Handling and Response Technologies

Question

An attack on a network is BEST blocked using which of the following?

Options

  • AIPS device inline
  • BHIPS
  • CWeb proxy
  • DLoad balancer

How the community answered

(26 responses)
  • A
    88% (23)
  • C
    4% (1)
  • D
    8% (2)

Explanation

An Intrusion Prevention System (IPS) device placed inline is best suited to block attacks on a network actively. Being inline allows the IPS to analyze and take action on the traffic as it passes through the device, effectively preventing malicious traffic from reaching its target. The IPS can detect and block a wide range of attacks in real-time by using various detection methods, such as signature-based detection, anomaly detection, and policy-based detection. Unlike Host-based Intrusion Prevention Systems (HIPS), web proxies, or load balancers, an inline IPS is specifically designed to inspect and act on incoming and outgoing network traffic to prevent attacks before they reach network devices or applications.

Topics

#IPS#inline device#network attack prevention#security controls

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice