CompTIA Exam SY0-701 Topic 3 Question 25 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 25
Topic #: 3

A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following modes will best accomplish this task?

AMonitor

BSensor

CAudit

DActive

Show Suggested Answer

Suggested Answer: D

To block signature-based attacks, the Intrusion Prevention System (IPS) must be in active mode. In this mode, the IPS can actively monitor and block malicious traffic in real time based on predefined signatures. This is the best mode to prevent known attack types from reaching the internal network.

Monitor mode and sensor mode are typically passive, meaning they only observe and log traffic without actively blocking it.

Audit mode is used for review purposes and does not actively block traffic.

by Kiley at Sep 16, 2024, 11:50 PM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilbert

2 months ago

Ah, the age-old question of how to best block signature-based attacks. I'm gonna have to go with D) Active mode on this one. Gotta be proactive, you know? Unless, of course, you want to be the one explaining to the boss why the network's on fire. No, thank you!

upvoted 0 times

...

Whitney

2 months ago

Alright, let's see here. I'm thinking D) Active mode is the way to go. Anything else would just be like trying to stop a speeding bullet with a fly swatter. Not happening on my watch!

upvoted 0 times

...

Annabelle

2 months ago

Hmm, I'm gonna have to go with D) Active mode on this one. Anything less and those pesky signature-based attacks will slip right through. Can't have that, can we? Time to put on our security engineer superhero capes!

upvoted 0 times

Alberta

10 days ago

Active mode for the win! Let's make sure our environment is secure.

upvoted 0 times

...

Lisha

14 days ago

Definitely, Active mode will help us stay one step ahead of those pesky attacks.

upvoted 0 times

...

Jani

15 days ago

Active mode it is! Let's keep those signature-based attacks at bay.

upvoted 0 times

...

Beckie

25 days ago

I agree, D) Active mode is the way to go to block those attacks.

upvoted 0 times

...

Reena

2 months ago

Wow, this question is a no-brainer! Clearly, the answer is D) Active mode. That's the only way to actively block those signature-based attacks. Gotta love a security engineer who means business!

upvoted 0 times

Grover

1 months ago

User 3: Definitely, Active mode is the most effective for blocking signature-based attacks.

upvoted 0 times

...

Reta

1 months ago

Yeah, Active mode is the way to go to block those attacks.

upvoted 0 times

...

Francesco

1 months ago

I think the answer is D) Active mode.

upvoted 0 times

...

Delsie

2 months ago

I'm going with C. Audit mode. That way the IPS can just log all the attacks and we can review them later over a nice cup of tea and some crumpets.

upvoted 0 times

...

Lashawna

2 months ago

D. Active mode definitely seems like the way to go. Blocking those attacks is the whole point of an IPS, right? Anything less would be like bringing a knife to a gunfight.

upvoted 0 times

Lorean

1 months ago

User 3: Active mode is definitely the way to go for blocking signature-based attacks.

upvoted 0 times

...

Marge

1 months ago

User 2: I agree, Active mode is the most effective for that task.

upvoted 0 times

...

Theron

1 months ago

User 4: Sensor and Audit modes wouldn't actively block anything, so Active is the way to go.

upvoted 0 times

...

Alishia

1 months ago

Monitoring alone wouldn't be enough to stop those attacks.

upvoted 0 times

...

Leonie

1 months ago

I agree, Active mode is the most proactive option.

upvoted 0 times

...

Lynelle

2 months ago

I think Active mode is the best choice for blocking attacks.

upvoted 0 times

...

Larae

2 months ago

I think Active mode is the best choice for blocking signature-based attacks.

upvoted 0 times

...

India

2 months ago

But Active mode takes immediate action to block the attacks, which is crucial for security.

upvoted 0 times

...

Belen

2 months ago

I disagree, I believe Sensor mode would be more effective for this task.

upvoted 0 times

...

India

3 months ago

I think the best mode for blocking signature-based attacks is Active.

upvoted 0 times

...

Fausto

3 months ago

Hmm, I'm leaning towards A. Monitor mode. That way the IPS can just observe the traffic without actually blocking anything. Gotta keep an eye on those sneaky hackers!

upvoted 0 times

...