Which are two main features of Intrusion Prevention? (Choose two.)

The correct answer is A. Threat analysis through network behavior analysis D. Vulnerability-based threat management. Intrusion Prevention (IPS) is fundamentally built on two pillars: behavioral analysis of network traffic (A) to detect anomalous or suspicious patterns, and vulnerability-based threat management (D), meaning it uses known vulnerability signatures to identify and block…

Network Security

Question

Options

AThreat analysis through network behavior analysis
BProtecting against Zero-Day attacks
CLayer-4 traffic monitoring across platforms
DVulnerability-based threat management

How the community answered

(36 responses)

A
81% (29)
B
14% (5)
C
6% (2)

Explanation

Intrusion Prevention (IPS) is fundamentally built on two pillars: behavioral analysis of network traffic (A) to detect anomalous or suspicious patterns, and vulnerability-based threat management (D), meaning it uses known vulnerability signatures to identify and block exploitation attempts before they succeed. Together, these define how IPS detects how attacks behave and what weaknesses they target.

Why B is wrong: Zero-day protection is a capability associated with advanced sandboxing or AI/ML-driven solutions - traditional IPS relies on known signatures and vulnerability patterns, making it largely ineffective against true zero-day threats.

Why C is wrong: Layer-4 monitoring is characteristic of stateful firewalls, not IPS. IPS operates deeper - typically Layers 4–7 - and focuses on payload inspection rather than just transport-layer header checking.

Memory tip: Think "IPS = Analyze + Attack Surface" - IPS Analyzes network behavior (A) and manages Defense via known vulnerabilities (D). Zero-day and L4-only monitoring belong to other tools.

Topics

#Intrusion Prevention#Network Behavior Analysis#Vulnerability Management#Threat Detection

Community Discussion

No community discussion yet for this question.

Full 500-651 Practice