CAS-005 · Question #225
A company implemented a NIDS and a NIPS on the most critical environments. Since this implementation, the company has been experiencing network connectivity issues. Which of the following should the…
The correct answer is A. Implementing the NIDS with a port mirror in the core switch and the NIPS in the main firewall. Placing the NIDS on a port mirror allows it to passively monitor traffic without affecting performance, while deploying the NIPS at the firewall ensures it can actively block malicious traffic at a controlled chokepoint. This architecture balances detection, prevention, and…
Question
A company implemented a NIDS and a NIPS on the most critical environments. Since this implementation, the company has been experiencing network connectivity issues. Which of the following should the security architect recommend for a new NIDS/NIPS implementation?
Options
- AImplementing the NIDS with a port mirror in the core switch and the NIPS in the main firewall
- BImplementing the NIDS and the NIPS together with the main firewall
- CImplementing a NIDS without a NIPS to increase the detection capability
- DImplementing the NIDS in the bastion host and the NIPS in the branch network router
How the community answered
(37 responses)- A81% (30)
- B3% (1)
- C5% (2)
- D11% (4)
Explanation
Placing the NIDS on a port mirror allows it to passively monitor traffic without affecting performance, while deploying the NIPS at the firewall ensures it can actively block malicious traffic at a controlled chokepoint. This architecture balances detection, prevention, and network
Community Discussion
No community discussion yet for this question.