PCI SSCPCI DSSMonitoring TestingEASYFree question
How does an IPS differ from an IDS?
- A.An IPS only inspects traffic after it is delivered to the host, while an IDS can drop packets at the network edge
- B.An IDS can quarantine infected hosts automatically, while an IPS only logs events for later review by analysts
- C.An IPS can automatically block detected threats in addition to detecting them, while an IDS only alerts
- D.An IPS is installed on endpoints, while an IDS only runs on the perimeter firewall
Why C is correct
An IPS actively blocks detected threats in real-time, while an IDS only detects and alerts. PCI DSS requires intrusion detection and/or prevention capabilities.
Know someone studying for PCI DSS? Send them this one.