Question 66

IDS allows a network administrator to analyze attacks coming from the Internet without affecting latency.

An Intrusion Detection System (IDS) monitors network traffic for suspicious activity and potential threats, enabling analysis without introducing significant delays in network performance.

A) IPS

An Intrusion Prevention System (IPS) actively blocks detected threats and can introduce latency due to its inline nature, as it inspects and potentially drops packets in real-time, which can affect network performance.

B) IDS

An Intrusion Detection System (IDS) operates by passively monitoring traffic and generating alerts based on suspicious activities. This non-intrusive method means it does not interfere with the flow of network traffic, thus maintaining low latency while providing valuable insights into potential attacks.

C) Load balancer

A load balancer distributes network or application traffic across multiple servers to ensure optimal resource use and reliability. While it enhances performance and redundancy, it does not specifically analyze attacks or security threats from the Internet.

D) Firewall

A firewall is designed to block or allow traffic based on predetermined security rules. While it plays a critical role in network security, it does not specifically focus on analyzing attacks in real-time like an IDS, nor does it provide the same level of passive monitoring without affecting latency.

Conclusion

The IDS is the correct choice as it enables network administrators to detect and analyze potential threats without impacting network performance. In contrast, IPS, load balancers, and firewalls either actively block traffic, manage distribution, or enforce rules that can introduce latency, making them less suitable for the task of passive analysis.