Which type of intrusion detection system can monitor and alert on attacks, but cannot stop them?

'Detective' is not a standard IDS deployment classification - all IDS systems perform detection, so this term does not describe a distinct deployment type.

A passive IDS connects to a network tap or SPAN port and receives only a copy of traffic, meaning it can observe and generate alerts but cannot interrupt or block data flows - because it is never inline with the actual traffic path, stopping an attack is architecturally impossible without a separate enforcement mechanism.

'Intuitive' is not a recognized IDS classification in any major security framework or vendor taxonomy.

A reactive IDS (also called an active or inline IDS/IPS) is specifically designed to take automated blocking or reset actions in response to detected threats, so it can stop attacks.