Security OperationsCâu 66 / 100
Which control monitors network traffic and actively blocks detected malicious activity inline?
a.IDS
b.SIEM
c.Honeypot
d.IPS
Giải thích
An intrusion prevention system (IPS) sits inline and can automatically block or drop malicious traffic it detects. Unlike an IDS, which only alerts, an IPS takes preventive action. Tuning is important to avoid blocking legitimate traffic.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- Which is the correct order of the incident response process?
- During incident response, which step focuses on limiting the damage and preventing the threat from spreading?
- Which system aggregates and correlates log data from many sources to detect security events in near real time?
- Which technology inspects data in motion and at rest to prevent unauthorized exfiltration of sensitive information?
- Which process applies vendor updates to fix known software vulnerabilities?
- Reducing a system's attack surface by disabling unneeded services and applying secure configurations is called:
Cập nhật gần nhất: · quy trình kiểm tra
Đội Ngũ Biên Tập PrepPass · Đối chiếu với CompTIA Security+ (SY0-701) · Quy trình kiểm tra