Which two attack vectors are protected by Next-Generation Intrusion Prevention System (NGIPS)? (Choose two)

Question

Options

• ACloud
• BData Center
• CCorporate WAN
• DEndpoints
• EEmail

• A
  88% (37)
• D
  7% (3)
• E
  5% (2)

Explanation

Next-Generation Intrusion Prevention Systems are network-based security tools designed to inspect and block malicious traffic traversing network paths. Cloud (A) and Corporate WAN (C) represent the two primary attack vectors because NGIPS is deployed inline on network segments - specifically where traffic flows between users/branches and cloud resources, and across the WAN links connecting corporate locations - giving it full visibility to detect and block exploits, malware, and policy violations in transit.

Why the distractors are wrong:

• B (Data Center): Data centers are primarily protected by Next-Generation Firewalls (NGFW) and segmentation controls, not NGIPS as a primary vector.
• D (Endpoints): Endpoints are covered by endpoint protection solutions like AMP for Endpoints (EDR/EPP), which operate at the host level rather than the network level.
• E (Email): Email threats are mitigated by dedicated email security gateways (e.g., Cisco Secure Email), not NGIPS.

Memory tip: Think of NGIPS as a "network highway patrol" - it monitors the roads (WAN) and on-ramps (Cloud connections) where traffic actually flows, not the buildings (Data Center), the vehicles themselves (Endpoints), or the postal service (Email). If traffic travels across a network path, NGIPS can inspect it.

No community discussion yet for this question.