CompTIA SecurityX (CAS-005) CAS-005 — Question 182

The correct answer is A. Option A: Implementing the NIDS with a port mirror in the core switch and the NIPS in the main firewall

Explanation

A firewall enforces traffic policy by permitting or blocking connections based on configured rules. An intrusion detection system identifies and alerts on suspicious activity without normally blocking it. An intrusion prevention system detects and actively blocks malicious traffic inline. This option keeps traffic private / properly secured as required.