ccna 4 questions and answers

ccna 4 questions and answers.-A better solution is to use a device that can immediately detect and stop the attack from being routed. An IPS can perform this function.5.1.1.3 Detecting and Stopping AttacksIntrusion Prevention Systems (IPS) are built on top of IDS technology. Unlike IDS, IPS devices are implemented in an inline mode, which means that all inbound and outbound traffic is processed through it. The IPS is not allowed to enter the trust area of the network until it has analyzed the packets. IPS can also detect and B that is, resolve network problems.IPS monitors Layer 3 and Layer 4 traffic and analyzes packet content and load to discover more sophisticated embedded attacks that may be contained in malicious data at Layers 1 through 7. The Cisco IPS platform uses a combination of detection techniques, including signature-based, profile-based, and protocol-based analysis for intrusion detection. These in-depth analyses allow the IPS to identify, stop, and block attacks that might normally pass through traditional firewall devices. When a packet enters an interface on an IPS, the packet cannot be delivered to an outbound or trusted interface until it has been analyzed.The advantage of the IPS inline mode of operation is that it can be used to prevent single packet attacks from reaching the target system. the disadvantage is that an improperly configured IPS or an incorrect IPS solution can have an impact on the flow of packets that are forwarded for traffic. The major difference between IDS and IPS is that IPS responds immediately and does not allow malicious traffic to pass, whereas IDS may allow malicious traffic to pass before it is resolved. malicious traffic is allowed to pass before it is resolved5.1.1.4 Characteristics of IDS and IPSIDS and IPS technologies share a number of features. Both IDS and IPS technologies are deployed as sensors. An IDS or IPS sensor can be any of the following devices.A router equipped with CiscoIOS IPS software.A device specifically designed to provide proprietary IDS or IPS services.A network module that is installed on an ASA, switch, or router.