Mike, a network administrator, has been asked to passively monitor network traffic to the
company’s sales websites. Which of the following would be BEST suited for this task?
A.
HIDS
B.
Firewall
C.
NIPS
D.
Spam filter
Which of the following would be BEST suited for this task?
Mike, a network administrator, has been asked to passively monitor network traffic to the
company’s sales websites. Which of the following would be BEST suited for this task?
how is NIPS correct? It says passively monitor, not detect and STOP threats, which is what a intrusion prevention system does.
Almost sounds like they said NIPS because it mentions network monitoring specifically, which of course HIDS and Spam Filtering are unconcerned with, and a firewall is for filtering (though many firewalls can be setup for some kind of monitoring). You could setup the NIPS to monitor and do nothing on detection . .
That’s probably true, but jeez what a tricky question. I would have said B. Firewall because the protection system directly contradicts the phrasing of the question as passive (As you said, some firewalls can be configured as passive monitors rather than just filters). And so many answers on CompTIA exams don’t allow you to answer with the ‘if-I-configured-it-this-way’ scenario in mind. Thanks for the feedback, your explanation of a reconfigured NIPS is really the only thing that would make C correct here.