352-001 · Question #378
On a large enterprise security solution, which two options are IDS or IPS modes of operation? (Choose two.)
The correct answer is B. promiscuous mode E. inline mode. IDS and IPS sensors operate in two primary deployment modes - promiscuous mode for passive detection and inline mode for active prevention.
Question
On a large enterprise security solution, which two options are IDS or IPS modes of operation? (Choose two.)
Options
- Atransparent mode
- Bpromiscuous mode
- Ctraffic discovery mode
- Drouted mode
- Einline mode
How the community answered
(66 responses)- A5% (3)
- B86% (57)
- C8% (5)
- D2% (1)
Why each option
IDS and IPS sensors operate in two primary deployment modes - promiscuous mode for passive detection and inline mode for active prevention.
Transparent mode is a Layer 2 bridging deployment mode used by firewalls, not a defined operational mode for IDS or IPS sensors.
Promiscuous mode is the standard IDS deployment where the sensor receives a copy of traffic via a SPAN port or network tap, operating entirely out-of-band so it can analyze and alert on threats without affecting the traffic flow.
Traffic discovery mode is not a recognized or standardized IDS/IPS operational mode in any major vendor architecture.
Routed mode is a Layer 3 forwarding mode associated with firewalls such as the Cisco ASA, not a mode of operation defined for IDS or IPS devices.
Inline mode is the standard IPS deployment where the sensor is inserted directly into the traffic path between network segments, enabling real-time packet inspection and the ability to actively drop or modify malicious traffic before it reaches its destination.
Concept tested: IDS and IPS sensor operational deployment modes
Source: https://www.cisco.com/c/en/us/td/docs/security/ips/7-0/configuration/guide/idm/idmguide7/idm_sensor_mode.html
Topics
Community Discussion
No community discussion yet for this question.