What is the role of an IPS?
- detecting and blocking of attacks in real time
- connecting global threat information to Cisco network security devices
- authenticating and validating traffic
- filtering of nefarious websites
Explanation: An intrusion prevention system (IPS) provides real-time detection and blocking of attacks.
Related exam: CCNA 1 v7 Modules 16 – 17 Exam Answers
Related exam: CCNA Security Chapter 1 Exam Answers
Case 2:
- to detect patterns of malicious traffic by the use of signature files
- to filter traffic based on defined rules and connection context
- to filter traffic based on Layer 7 information
- to enforce access control policies based on packet content
Explanation: For detecting malicious activity, an IPS uses a set of rules called signatures to detect patterns in network traffic.
Related exam: CCNA Cyber Ops (v1.1) – Chapter 5 Exam Answers
Related exam: CCNA 3 Module 3 Quiz - Network Security Concepts
