Exam CFR-310 topic 1 question 17 discussion

A. Intrusion Prevention System (IPS) Explanation: An Intrusion Prevention System (IPS) can automatically detect and prevent attacks like a denial of service (DoS). It actively monitors traffic, identifies malicious activity, and can block the attack by creating rules (such as access control lists) to prevent future attacks. Why the other answers are incorrect: B. Intrusion Detection System (IDS): An IDS only detects attacks but does not take action to stop or prevent them automatically. C. Blacklisting: Blacklisting is a method of denying access to specific entities, but it doesn't automatically detect or stop DoS attacks on its own. D. Whitelisting: Whitelisting allows only approved entities, but it does not prevent or respond to attacks like DoS unless already configured with pre-approved sources.

The answer is A, Intrusion prevention system (IPS). In this case, the IPS could automatically detect the DoS attack, block the traffic from the source, and create an ACL to prevent future attacks.

r04dB10ck is correct.....Answer should be A

D - detection, hence IPS (P - protection)