A tenant has provisioned a new database server. It needs to add the database files in the exclusion list for security scanning, as it allows down the performance and locks the database file. Which…

An IPS monitors and blocks malicious network traffic in transit and does not perform local file scanning or acquire file locks on the host.

An IDS passively monitors network traffic for suspicious patterns and does not interact with files stored on a database server.

Antivirus engines actively scan files on disk and can acquire file locks during the process, which directly interferes with database engines that require exclusive or shared access to their data files. Antivirus solutions provide exclusion lists specifically to exempt high-I/O files like database files from real-time scanning, preventing both performance degradation and file locking conflicts.

A firewall controls network-layer traffic flow between segments and has no mechanism to scan or lock local files on a server.