63. Intrusion Prevention

What is the primary function of an Intrusion Prevention System (IPS)?

• To alert about potential threats

• To block dangerous traffic in real-time

• To monitor network performance

• To manage network configurations

Which type of system can alert you about vulnerabilities but cannot block traffic?

• Firewall

• Intrusion Prevention System (IPS)

• Intrusion Detection System (IDS)

• Router

What happens in a fail open configuration when the security device fails?

• Network traffic stops completely

• Network traffic continues without security processes

• The device reboots automatically

• The device sends an alert to the administrator

In an active monitoring configuration, where is the IPS placed?

• Between the firewall and the core switch

• Before the firewall

• After the core switch

• Outside the network

What is a key limitation of passive monitoring?

• It is more expensive than active monitoring

• It cannot block traffic in real-time

• It can cause network downtime

• It requires complex configurations