CompTIA SY0-701 Exam - Topic 3 Question 25 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 25
Topic #: 3

A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following modes will best accomplish this task?

AMonitor

BSensor

CAudit

DActive

Show Suggested Answer

Suggested Answer: D

To block signature-based attacks, the Intrusion Prevention System (IPS) must be in active mode. In this mode, the IPS can actively monitor and block malicious traffic in real time based on predefined signatures. This is the best mode to prevent known attack types from reaching the internal network.

Monitor mode and sensor mode are typically passive, meaning they only observe and log traffic without actively blocking it.

Audit mode is used for review purposes and does not actively block traffic.

by Kiley at Sep 16, 2024, 11:50 PM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tiara

3 months ago

Audit mode? That’s just for logging, not blocking anything.

upvoted 0 times

...

Marleen

3 months ago

Definitely D, it’s the best for proactive defense!

upvoted 0 times

...

Simona

3 months ago

Wait, does Active mode really stop all signature-based attacks?

upvoted 0 times

...

Marshall

4 months ago

I think Monitor mode is enough for detection, not blocking.

upvoted 0 times

...

Ulysses

4 months ago

Active mode is the way to go for blocking attacks!

upvoted 0 times

...

Jettie

4 months ago

"Audit" seems more about logging and reporting, so I doubt that's the answer. I think "Active" is the way to go for blocking those signature-based attacks.

upvoted 0 times

...

Chandra

4 months ago

I feel like "Sensor" might be related to detection, but I can't recall if it actively blocks anything. I need to double-check my notes on that.

upvoted 0 times

...

Lizbeth

4 months ago

I remember practicing a question about IPS modes, and I think "Monitor" just observes traffic without blocking anything. So that can't be the right answer.

upvoted 0 times

...

Kerry

5 months ago

I think the "Active" mode is the one that actually blocks attacks, right? But I'm not entirely sure if that's the best choice for signature-based attacks specifically.

upvoted 0 times

...

Vilma

5 months ago

I've got this one! The answer is D. Active mode is the best choice to block signature-based attacks, since the IPS will actively intercept and prevent those types of threats.

upvoted 0 times

...

Rosita

5 months ago

Active mode seems like the obvious choice here. That's the mode where the IPS actively blocks and prevents attacks, which is what we need to stop signature-based attacks.

upvoted 0 times

...

Marget

5 months ago

Okay, let me think this through. The options are Monitor, Sensor, Audit, and Active. I'm not sure which one would be best for blocking signature-based attacks.

upvoted 0 times

...

Kallie

5 months ago

Hmm, this seems like a straightforward question about IPS modes. I think the key is to focus on the requirement to block signature-based attacks.

upvoted 0 times

...

Anjelica

5 months ago

I'm a bit confused on the differences between the modes. I'll need to review my notes on IPS configurations to make sure I pick the right one for this scenario.

upvoted 0 times

...

Macy

5 months ago

I think I've got a good handle on this. The instructions are pretty clear - I just need to group the data in the PivotTable by the "Full Package Price" column in steps of 100 from 0 to 200. Shouldn't be too tricky.

upvoted 0 times

...

Wilbert

1 year ago

Ah, the age-old question of how to best block signature-based attacks. I'm gonna have to go with D) Active mode on this one. Gotta be proactive, you know? Unless, of course, you want to be the one explaining to the boss why the network's on fire. No, thank you!

upvoted 0 times

...

Whitney

1 year ago

Alright, let's see here. I'm thinking D) Active mode is the way to go. Anything else would just be like trying to stop a speeding bullet with a fly swatter. Not happening on my watch!

upvoted 0 times

...

Annabelle

1 year ago

Hmm, I'm gonna have to go with D) Active mode on this one. Anything less and those pesky signature-based attacks will slip right through. Can't have that, can we? Time to put on our security engineer superhero capes!

upvoted 0 times

Alberta

1 year ago

Active mode for the win! Let's make sure our environment is secure.

upvoted 0 times

...

Lisha

1 year ago

Definitely, Active mode will help us stay one step ahead of those pesky attacks.

upvoted 0 times

...

Jani

1 year ago

Active mode it is! Let's keep those signature-based attacks at bay.

upvoted 0 times

...

Beckie

1 year ago

I agree, D) Active mode is the way to go to block those attacks.

upvoted 0 times

...

Reena

1 year ago

Wow, this question is a no-brainer! Clearly, the answer is D) Active mode. That's the only way to actively block those signature-based attacks. Gotta love a security engineer who means business!

upvoted 0 times

Grover

1 year ago

User 3: Definitely, Active mode is the most effective for blocking signature-based attacks.

upvoted 0 times

...

Reta

1 year ago

Yeah, Active mode is the way to go to block those attacks.

upvoted 0 times

...

Francesco

1 year ago

I think the answer is D) Active mode.

upvoted 0 times

...

Delsie

1 year ago

I'm going with C. Audit mode. That way the IPS can just log all the attacks and we can review them later over a nice cup of tea and some crumpets.

upvoted 0 times

...

Lashawna

1 year ago

D. Active mode definitely seems like the way to go. Blocking those attacks is the whole point of an IPS, right? Anything less would be like bringing a knife to a gunfight.

upvoted 0 times

Lorean

1 year ago

User 3: Active mode is definitely the way to go for blocking signature-based attacks.

upvoted 0 times

...

Marge

1 year ago

User 2: I agree, Active mode is the most effective for that task.

upvoted 0 times

...

Theron

1 year ago

User 4: Sensor and Audit modes wouldn't actively block anything, so Active is the way to go.

upvoted 0 times

...

Alishia

1 year ago

Monitoring alone wouldn't be enough to stop those attacks.

upvoted 0 times

...

Leonie

1 year ago

I agree, Active mode is the most proactive option.

upvoted 0 times

...

Lynelle

1 year ago

I think Active mode is the best choice for blocking attacks.

upvoted 0 times

...

Larae

1 year ago

I think Active mode is the best choice for blocking signature-based attacks.

upvoted 0 times

...

India

1 year ago

But Active mode takes immediate action to block the attacks, which is crucial for security.

upvoted 0 times

...

Belen

1 year ago

I disagree, I believe Sensor mode would be more effective for this task.

upvoted 0 times

...

India

1 year ago

I think the best mode for blocking signature-based attacks is Active.

upvoted 0 times

...

Fausto

1 year ago

Hmm, I'm leaning towards A. Monitor mode. That way the IPS can just observe the traffic without actually blocking anything. Gotta keep an eye on those sneaky hackers!

upvoted 0 times

...