Exam 220-1001 All QuestionsBrowse all questions from this exam
Question 52

A network administrator must install a device that will proactively stop outside attacks from reaching the LAN.

Which of the following devices would BEST meet the organization's needs?

    Correct Answer: A

    An Intrusion Prevention System (IPS) is designed to not only detect but also actively stop identified threats in real-time. This makes it the best choice for proactively stopping outside attacks from reaching the LAN. In contrast, an Intrusion Detection System (IDS) only detects and alerts on potential threats, but does not actively prevent them. A proxy server handles requests and responses between clients and servers, and an authentication server manages user credentials and access, neither of which actively stop outside attacks.

Discussion
nolte_ehOption: A

IPS - intrusion prevention system IDS - intrusion detection system

SixGoddessOption: A

A IPS can detect and prevent identified threats in real time actively stopping malicious traffic from entering the network