In an IaaS environment, the security team issues a new signature file to prevent specific malware threats from infiltrating the company network. Which of the following describes where the security…

An IDS (Intrusion Detection System) primarily monitors and alerts on suspicious activity but does not actively prevent the threat from reaching its target.

A spam filter is designed to block unsolicited email and would not prevent malware threats from infiltrating a company network outside of email.

A Web Application Firewall (WAF) inspects HTTP/S traffic, filters out malicious requests, and protects web applications from common attacks like SQL injection and cross-site scripting, often using signature-based detection for known threats. Deploying updated signatures to a WAF enables it to detect and block the specific malware threats from reaching web applications within the IaaS environment.

A NIPS (Network Intrusion Prevention System) operates at the network layer to prevent threats, but a WAF is more specific and effective for web application threats that often involve malware signatures.

A HIPS (Host Intrusion Prevention System) is deployed on individual hosts or servers, and while it prevents threats, a WAF is specifically designed for front-facing web applications.