N10-005 · Question #777
Which of the following network devices is meant to actively protect against network treats and can disable connections to stop malicious traffic if necessary?
The correct answer is B. IPS. An IPS (Intrusion Prevention System) is an active security device that monitors network traffic and can drop packets or terminate connections when malicious activity is detected.
Question
Which of the following network devices is meant to actively protect against network treats and can disable connections to stop malicious traffic if necessary?
Options
- ADMZ
- BIPS
- CSSL VPN
- DLayer 3 switch
How the community answered
(60 responses)- A3% (2)
- B93% (56)
- C2% (1)
- D2% (1)
Why each option
An IPS (Intrusion Prevention System) is an active security device that monitors network traffic and can drop packets or terminate connections when malicious activity is detected.
A DMZ is a network segment used to isolate publicly accessible servers from the internal network - it is an architectural zone, not an active threat-blocking device.
An IPS sits inline with network traffic, inspects packets in real time, and takes automated action such as blocking connections or dropping packets to stop malicious traffic before it reaches its target. Unlike an IDS which only alerts, an IPS actively intervenes, making it the correct choice for a device that can 'disable connections' to stop threats.
An SSL VPN provides encrypted remote access for users - it does not inspect or block malicious network traffic.
A Layer 3 switch performs routing and VLAN separation but has no built-in intrusion detection or prevention capabilities.
Concept tested: Intrusion Prevention System (IPS) active threat blocking
Source: https://www.cisco.com/c/en/us/products/security/intrusion-prevention-system-ips/index.html
Topics
Community Discussion
No community discussion yet for this question.