CompTIA SY0-701 Exam - Topic 3 Question 25 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 25
Topic #: 3

A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following modes will best accomplish this task?

AMonitor

BSensor

CAudit

DActive

Show Suggested Answer

Suggested Answer: D

To block signature-based attacks, the Intrusion Prevention System (IPS) must be in active mode. In this mode, the IPS can actively monitor and block malicious traffic in real time based on predefined signatures. This is the best mode to prevent known attack types from reaching the internal network.

Monitor mode and sensor mode are typically passive, meaning they only observe and log traffic without actively blocking it.

Audit mode is used for review purposes and does not actively block traffic.

by Kiley at Sep 16, 2024, 11:50 PM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tiara

10 months ago

Audit mode? That’s just for logging, not blocking anything.

upvoted 0 times

...

Marleen

10 months ago

Definitely D, it’s the best for proactive defense!

upvoted 0 times

...

Simona

10 months ago

Wait, does Active mode really stop all signature-based attacks?

upvoted 0 times

...

Marshall

10 months ago

I think Monitor mode is enough for detection, not blocking.

upvoted 0 times

...

Ulysses

11 months ago

Active mode is the way to go for blocking attacks!

upvoted 0 times

...

Jettie

11 months ago

"Audit" seems more about logging and reporting, so I doubt that's the answer. I think "Active" is the way to go for blocking those signature-based attacks.

upvoted 0 times

...

Chandra

11 months ago

I feel like "Sensor" might be related to detection, but I can't recall if it actively blocks anything. I need to double-check my notes on that.

upvoted 0 times

...

Lizbeth

11 months ago

I remember practicing a question about IPS modes, and I think "Monitor" just observes traffic without blocking anything. So that can't be the right answer.

upvoted 0 times

...

Kerry

11 months ago

I think the "Active" mode is the one that actually blocks attacks, right? But I'm not entirely sure if that's the best choice for signature-based attacks specifically.

upvoted 0 times

...

Vilma

11 months ago

I've got this one! The answer is D. Active mode is the best choice to block signature-based attacks, since the IPS will actively intercept and prevent those types of threats.

upvoted 0 times

...

Rosita

11 months ago

Active mode seems like the obvious choice here. That's the mode where the IPS actively blocks and prevents attacks, which is what we need to stop signature-based attacks.

upvoted 0 times

...

Marget

11 months ago

Okay, let me think this through. The options are Monitor, Sensor, Audit, and Active. I'm not sure which one would be best for blocking signature-based attacks.

upvoted 0 times

...

Kallie

11 months ago

Hmm, this seems like a straightforward question about IPS modes. I think the key is to focus on the requirement to block signature-based attacks.

upvoted 0 times

...

Anjelica

11 months ago

I'm a bit confused on the differences between the modes. I'll need to review my notes on IPS configurations to make sure I pick the right one for this scenario.

upvoted 0 times

...

Macy

12 months ago

I think I've got a good handle on this. The instructions are pretty clear - I just need to group the data in the PivotTable by the "Full Package Price" column in steps of 100 from 0 to 200. Shouldn't be too tricky.

upvoted 0 times

...

Wilbert

2 years ago

Ah, the age-old question of how to best block signature-based attacks. I'm gonna have to go with D) Active mode on this one. Gotta be proactive, you know? Unless, of course, you want to be the one explaining to the boss why the network's on fire. No, thank you!

upvoted 0 times

...

Whitney

2 years ago

Alright, let's see here. I'm thinking D) Active mode is the way to go. Anything else would just be like trying to stop a speeding bullet with a fly swatter. Not happening on my watch!

upvoted 0 times

...

Annabelle

2 years ago

Hmm, I'm gonna have to go with D) Active mode on this one. Anything less and those pesky signature-based attacks will slip right through. Can't have that, can we? Time to put on our security engineer superhero capes!

upvoted 0 times

Alberta

2 years ago

Active mode for the win! Let's make sure our environment is secure.

upvoted 0 times

...

Lisha

2 years ago

Definitely, Active mode will help us stay one step ahead of those pesky attacks.

upvoted 0 times

...

Jani

2 years ago

Active mode it is! Let's keep those signature-based attacks at bay.

upvoted 0 times

...

Beckie

2 years ago

I agree, D) Active mode is the way to go to block those attacks.

upvoted 0 times

...

Reena

2 years ago

Wow, this question is a no-brainer! Clearly, the answer is D) Active mode. That's the only way to actively block those signature-based attacks. Gotta love a security engineer who means business!

upvoted 0 times

Grover

2 years ago

User 3: Definitely, Active mode is the most effective for blocking signature-based attacks.

upvoted 0 times

...

Reta

2 years ago

Yeah, Active mode is the way to go to block those attacks.

upvoted 0 times

...

Francesco

2 years ago

I think the answer is D) Active mode.

upvoted 0 times

...

Delsie

2 years ago

I'm going with C. Audit mode. That way the IPS can just log all the attacks and we can review them later over a nice cup of tea and some crumpets.

upvoted 0 times

...

Lashawna

2 years ago

D. Active mode definitely seems like the way to go. Blocking those attacks is the whole point of an IPS, right? Anything less would be like bringing a knife to a gunfight.

upvoted 0 times

Lorean

2 years ago

User 3: Active mode is definitely the way to go for blocking signature-based attacks.

upvoted 0 times

...

Marge

2 years ago

User 2: I agree, Active mode is the most effective for that task.

upvoted 0 times

...

Theron

2 years ago

User 4: Sensor and Audit modes wouldn't actively block anything, so Active is the way to go.

upvoted 0 times

...

Alishia

2 years ago

Monitoring alone wouldn't be enough to stop those attacks.

upvoted 0 times

...

Leonie

2 years ago

I agree, Active mode is the most proactive option.

upvoted 0 times

...

Lynelle

2 years ago

I think Active mode is the best choice for blocking attacks.

upvoted 0 times

...

Larae

2 years ago

I think Active mode is the best choice for blocking signature-based attacks.

upvoted 0 times

...

India

2 years ago

But Active mode takes immediate action to block the attacks, which is crucial for security.

upvoted 0 times

...

Belen

2 years ago

I disagree, I believe Sensor mode would be more effective for this task.

upvoted 0 times

...

India

2 years ago

I think the best mode for blocking signature-based attacks is Active.

upvoted 0 times

...

Fausto

2 years ago

Hmm, I'm leaning towards A. Monitor mode. That way the IPS can just observe the traffic without actually blocking anything. Gotta keep an eye on those sneaky hackers!

upvoted 0 times

...