County network defenders deploy intrusion detection and prevention for traffic to citizen-services portals. What operational practice is most important after install?
Select an answer to reveal the explanation.
Short Explanation
An IDS/IPS straight out of the box is like a smoke alarm that screams for toast — useful only after you tune it to the building. Match signatures and baselines to city traffic and keep the alert path alive. Set-and-forget noise or offline sensors waste the investment.
Full Explanation
Intrusion detection and prevention systems require ongoing operational tuning to municipal traffic and applications so true positives are actionable and false positives do not overwhelm analysts. Continuous review of signatures, baselines, and response workflows is part of Domain 7 monitoring operations. Untuned, offline, or unrouted alerting defeats the purpose of IDPS deployment.