Understanding IDS, IPS, and Firewalls

Which of the following best describes the primary function of an Intrusion Detection System (IDS)?

• To block all incoming network traffic

• To monitor network traffic for suspicious activity and alert administrators

• To encrypt data before transmission

• To assign IP addresses to devices

Which type of IDS analyses network traffic for known attack patterns?

• Host-based IDS

• Network-based IDS

• Signature-based IDS

• Behaviour-based IDS

What is the main difference between an IDS and an IPS?

• IDS can block traffic, IPS cannot

• IPS can block or prevent malicious traffic, IDS only detects and alerts

• IDS is installed on routers, IPS is installed on switches

• IPS is only used in wireless networks

Which of the following is NOT a type of firewall?

• Packet-filtering firewall

• Application-layer firewall

• Circuit-level gateway

• Behaviour-based firewall

A host-based IDS is primarily installed on:

• Network switches

• Individual computers or servers

• Routers

• Firewalls

Which statement about firewalls is correct?

• Firewalls can only allow traffic, not block it

• Firewalls can be both hardware and software-based

• Firewalls are only used in home networks

• Firewalls are the same as antivirus software

Which of the following best describes a network-based IDS?

• It monitors and analyses the traffic on a specific device

• It monitors and analyses traffic across an entire network segment

• It blocks all unauthorised emails

• It encrypts all outgoing data

Which type of firewall operates at the application layer of the OSI model?

• Packet-filtering firewall

• Circuit-level gateway

• Application-layer firewall

• Network-based firewall

Which of the following is a key advantage of an IPS over an IDS?

• Lower cost

• Ability to automatically prevent attacks in real-time

• Simpler configuration

• No need for updates

Which of the following is an example of a stateful firewall?

• A firewall that only checks the source and destination IP addresses

• A firewall that tracks the state of active connections and makes decisions based on the context of the traffic

• A firewall that only blocks websites

• A firewall that only works on wireless networks