nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #317

What is the PRIMARY purpose of using an intrusion detection and prevention system?

The correct answer is B. To detect and block malicious attacks. An Intrusion Detection and Prevention System (IDPS) serves the dual primary purpose of detecting and blocking malicious attacks. The 'detection' component (IDS) monitors network traffic and alerts on suspicious activity, while the 'prevention' component (IPS) actively blocks or…

Network Security Concepts

Question

What is the PRIMARY purpose of using an intrusion detection and prevention system?

Options

  • ATo prevent existing threats
  • BTo detect and block malicious attacks
  • CTo stop malicious code
  • DTo detect attempts to connect to a system

How the community answered

(57 responses)
  • A
    2% (1)
  • B
    91% (52)
  • C
    2% (1)
  • D
    5% (3)

Explanation

An Intrusion Detection and Prevention System (IDPS) serves the dual primary purpose of detecting and blocking malicious attacks. The 'detection' component (IDS) monitors network traffic and alerts on suspicious activity, while the 'prevention' component (IPS) actively blocks or drops malicious traffic in real time. Option A ('prevent existing threats') is vague and incomplete. Option C ('stop malicious code') describes antivirus/anti-malware more than IDPS. Option D ('detect attempts to connect') only describes a narrow subset of IDS functionality, not the full IDPS purpose.

Topics

#IDS/IPS#Network Security#Security Controls

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice