Which of the following is not a collector function?

Question

Options

• AIPS detection
• BSyslog log collection
• CDataflow log collection

• A
  78% (38)
• B
  16% (8)
• C
  6% (3)

Explanation

IPS (Intrusion Prevention System) detection is not a collector function because IPS is an active security control that inspects traffic and takes action to block or prevent threats in real time - it is a detection and enforcement mechanism, not a data gathering tool. Syslog log collection is a collector function: it uses the Syslog protocol to passively gather and forward log messages from devices and applications to a central repository. Dataflow log collection is likewise a collector function, capturing network traffic metadata (such as source/destination, bytes, and protocol) for analysis and storage.

Memory tip: Think "collectors gather, IPS acts." If something is preventing or alerting, it's not collecting - IPS fits the prevention side of the PPDRRR (Prevent, Detect, Respond...) model, while Syslog and dataflow tools sit firmly on the collect side of a SIEM pipeline.

No community discussion yet for this question.