A small bank is introducing online banking to its customers through its new secured website. The firewall has three interfaces: one for the Internet connection, another for the DMZ, and the other…

Question

Options

• AImplement NIPS inline between the web server and the firewall.
• BImplement a web application firewall inline between the web server and the firewall.
• CImplement host intrusion prevention on all machines at the bank.
• DConfigure the firewall policy to only allow communication with the web server using SSL.

• A
  9% (2)
• B
  17% (4)
• C
  52% (12)
• D
  22% (5)

Explanation

The question asks for protection from ALL likely attacks, not just network or web-layer attacks. Host intrusion prevention systems (HIPS) installed on every machine at the bank protect each individual endpoint from a wide variety of threats - malware, privilege escalation, unauthorized process execution, insider threats, and more. NIPS (A) and WAF (B) operate at specific network or application layers and would miss host-level attacks. SSL-only filtering (D) only encrypts traffic in transit and provides no protection against attacks that occur at the server or endpoint. HIPS provides the broadest, most comprehensive coverage across all attack vectors.

No community discussion yet for this question.