300-320 · Question #721
An engineer must install a firewall and IPS that does not deny traffic to hosts but notifies another device to block traffic. In which mode is the IPS deployed?
The correct answer is B. promiscuous. Promiscuous mode (also called passive or out-of-band mode) is the correct answer. In this mode, the IPS receives a copy of traffic via a SPAN port or network tap - it does not sit inline with the traffic flow and therefore cannot drop packets directly. Instead, it analyzes the…
Question
An engineer must install a firewall and IPS that does not deny traffic to hosts but notifies another device to block traffic. In which mode is the IPS deployed?
Options
- Amultitier
- Bpromiscuous
- Cinline
- Dredundant
How the community answered
(36 responses)- B92% (33)
- C3% (1)
- D6% (2)
Explanation
Promiscuous mode (also called passive or out-of-band mode) is the correct answer. In this mode, the IPS receives a copy of traffic via a SPAN port or network tap - it does not sit inline with the traffic flow and therefore cannot drop packets directly. Instead, it analyzes the copied traffic and, upon detecting a threat, sends a notification or shun command to an external device (such as a firewall or router) to block the malicious traffic. Inline mode (C) places the IPS directly in the traffic path, giving it the ability to drop packets itself. Multitier (A) and redundant (D) are not standard IPS deployment mode names.
Topics
Community Discussion
No community discussion yet for this question.