Intrusion prevention systems (IPS)
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Does an IPS automatically block detected threats?
2. Does an IPS sit inline in the traffic path?
3. Is an IPS the same as an IDS, which only alerts?
4. Does an IPS act without needing a person to approve each block?
5. Can an IPS stop an attack in real time?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1IPS | AWrong - an IPS blocks traffic, it doesn't just alert | |
| 2Inline placement | BIPS blocking | |
| 3Taking automatic action to stop a detected threat | CWrong - an IPS sits inline directly in the traffic path | |
| 4Sitting in the traffic path rather than only observing | DMonitors traffic and blocks threats automatically | |
| 5An IPS only alerts like an IDS | ESitting directly in the traffic path so traffic passes through it | |
| 6An IPS sits outside the traffic path, watching a copy | FInline deployment |
C
Definitions
Intrusion prevention system (IPS)
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
An IPS ______ malicious traffic
2.
An IPS sits ______ in the traffic path
3.
An IPS acts _____________ to stop threats
4.
IDS alerts, but an IPS can also _____ traffic
5.
An IPS is placed ______ in the network path
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
IPS never blocks traffic
B
IPS sits inline in traffic
C
It can stop threats live
Question 2
A
IPS sits inline in the path
B
IPS only watches, never acts
C
It blocks threats live
Question 3
A
IPS blocks malicious traffic
B
It acts automatically
C
It never sits inline
Question 4
A
IPS is placed inline
B
It blocks threats live
C
It acts without delay
D
It only alerts, never blocks
Question 5
A
IPS sits in the traffic path
B
It can stop an attack
C
It acts automatically
D
It never affects traffic
E
It works passively only
Answer Key
Intrusion prevention systems (IPS)
Section A: Quick Questions
Q1
A — Yes
Q2
A — Yes
Q3
A — No
Q4
B — Yes
Q5
B — Yes
Section B: Match the Pairs
Q1
IPS → Monitors traffic and blocks threats automatically
Q2
Inline placement → Sitting directly in the traffic path so traffic passes through it
Q3
Taking automatic action to stop a detected threat → IPS blocking
Q4
Sitting in the traffic path rather than only observing → Inline deployment
Q5
An IPS only alerts like an IDS → Wrong - an IPS blocks traffic, it doesn't just alert
Q6
An IPS sits outside the traffic path, watching a copy → Wrong - an IPS sits inline directly in the traffic path
Section C: Definitions
Q1
Intrusion prevention system (IPS) — A system that sits inline in the traffic path, detects threats, and automatically blocks them before they reach the network.Section D: Fill in the Blanks
Q1
An IPS blocks malicious trafficQ2
An IPS sits inline in the traffic pathQ3
An IPS acts automatically to stop threatsQ4
IDS alerts, but an IPS can also block trafficQ5
An IPS is placed inline in the network pathSection E: Spot the Error
Q1
A — An IPS does block traffic automatically, unlike an IDS which only alerts.
Q2
B — An IPS actively blocks threats - it doesn't just watch like an IDS.
Q3
C — An IPS sits inline in the traffic path so it can act directly.
Q4
D — Unlike an IDS, an IPS blocks threats rather than only alerting.
Q5
E — An IPS works actively, taking direct action on traffic, not passively.