What is the difference between an IDS and an IPS?
- A.IDS encrypts traffic; IPS decrypts traffic
- B.IDS works on internal networks; IPS works on external networks
- C.IDS is hardware-based; IPS is software-based
- D.An IDS detects and alerts on threats; an IPS detects and actively blocks threats
Why D is correct
An Intrusion Detection System (IDS) monitors network traffic and generates alerts when it identifies suspicious activity, but it does not block the traffic. An Intrusion Prevention System (IPS) does the same monitoring but can also take active measures to block or prevent the detected threats in real-time.
Know someone studying for Security Fundamentals? Send them this one.