nerdexam
CompTIA

CV0-003 · Question #63

A company wants to be sure their cloud infrastructure is secure but fully available. To ensure this, the company wants to observe and be alerted in the event of a security breach, but chose a…

The correct answer is B. IDS. An IDS passively monitors and alerts on security events without automatically blocking them, leaving the response decision to the administrator.

Security

Question

A company wants to be sure their cloud infrastructure is secure but fully available. To ensure this, the company wants to observe and be alerted in the event of a security breach, but chose a response for each alert. Which of the following solutions would meet these requirements?

Options

  • AXaaS
  • BIDS
  • CPaaS
  • DIPS

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    92% (46)
  • C
    2% (1)
  • D
    4% (2)

Why each option

An IDS passively monitors and alerts on security events without automatically blocking them, leaving the response decision to the administrator.

AXaaS

XaaS (Everything as a Service) is a broad cloud service delivery model category and is not a security monitoring or alerting tool.

BIDSCorrect

An Intrusion Detection System (IDS) monitors network traffic and system activity for suspicious behavior and generates alerts, but does not take automated action to block or stop threats. This passive posture keeps the infrastructure fully available because no traffic is dropped, while still notifying staff of potential breaches. Administrators retain full control to manually choose and execute a response for each alert, satisfying both requirements.

CPaaS

PaaS (Platform as a Service) is a cloud delivery model for hosting and developing applications and has no capability to detect or alert on security breaches.

DIPS

An IPS (Intrusion Prevention System) automatically blocks or drops malicious traffic inline without administrator intervention, eliminating the ability to manually choose a response per alert.

Concept tested: IDS passive detection vs IPS active prevention

Source: https://www.cisco.com/c/en/us/products/security/intrusion-detection-system/index.html

Topics

#IDS#IPS#intrusion detection#security monitoring

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice