Identifying specific attempts to penetrate systems is the function of the _______________.

A firewall primarily enforces network access control rules, blocking or allowing traffic, but does not actively identify ongoing penetration attempts within permitted traffic.

A router's main function is to forward network packets between different networks based on IP addresses, not to detect security penetration attempts.

An Intrusion Detection System (IDS) continuously monitors network or system activities for known attack signatures, anomalous behavior, or policy violations to detect unauthorized access or penetration attempts.

A vulnerability scanner proactively identifies weaknesses in systems before an attack occurs, rather than detecting active penetration attempts in real-time.

A CERT is a team that responds to security incidents and provides advisories, not a technical system for real-time identification of penetration attempts.