Network engineers must choose between an inline IPS and a tap/monitor IDS for a county uplink. Which distinction is correct?
Select an answer to reveal the explanation.
Short Explanation
Inline IPS is a checkpoint in the road that can stop a car; a tap IDS is a camera on the shoulder that watches. One prevents in-path, the other mainly detects. Mixing those roles muddies design choices.
Full Explanation
Inline intrusion prevention sits in the traffic path and can actively block malicious flows, while IDS on a tap or monitor port typically observes a copy of traffic for detection without forwarding. That active-versus-passive and inline-versus-tap distinction drives availability and enforcement tradeoffs. Claiming taps always block faster, that IPS only alerts, or that names are interchangeable is incorrect.