Exam 312-49v10 topic 1 question 135 discussion

EC Council Official Curricula Computer Hacking Forensic Investigator https://bookshelf.vitalsource.com/reader/books/9781635676969/ Module 9 page 943 Intrusion Detection System (IDS) An IDS is used to detect intrusions while an IPS is used to detect and prevent the intrusion on the network. This question is awful, but from a LITERAL approach, this is Detection versus Prevention. IDS is like a mall cop (observe and report). This is detection. IPS is like law enforcement (take action). This is prevention. Dropping a packet is taking action, and the only option with a "P" is (D. NIPS). BUT the question asks which IDS... I grudgingly choose (B. active IDS), but I strongly dislike this question. ----- If you agree, please UPVOTE. Each time you upvote someone with contributor access (like me) your vote is added to the Community Vote Distribution, which helps the entire community.

NIPS stands for Network-based Intrusion Prevention System. Unlike IDS, which detects and logs suspicious activities, NIPS can actively prevent malicious activities by taking actions such as blocking traffic, terminating connections, or reconfiguring firewall rules to stop attacks in real-time.

Watch out for this question. An IDS that drops the frame is called a NIPS.

B. An Active IDS is also known as Intrusion Detection and Prevention System (IDPS).