When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?
When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?
When running a vulnerability scan, if the Intrusion Detection System (IDS) cuts off your connection, it indicates a system that not only detects but also actively prevents network attacks. This functionality is characteristic of a Network-based Intrusion Prevention System (NIPS), which can actively take measures such as terminating connections or blocking traffic to prevent malicious activities. Therefore, the correct answer is NIPS.
B. An Active IDS is also known as Intrusion Detection and Prevention System (IDPS).
Watch out for this question. An IDS that drops the frame is called a NIPS.
NIPS stands for Network-based Intrusion Prevention System. Unlike IDS, which detects and logs suspicious activities, NIPS can actively prevent malicious activities by taking actions such as blocking traffic, terminating connections, or reconfiguring firewall rules to stop attacks in real-time.