CompTIA Cloud+ Practice Test

What security measure involves monitoring for potential unwanted activity and taking action against it?

1. IDS

2. IPS

3. HIDS

4. RAID

The correct answer is: IPS

The correct answer involves Intrusion Prevention Systems (IPS), which actively monitor network or system activities for malicious actions. An IPS goes beyond detection by not only identifying potential threats but also responding to them in real time by blocking or preventing the activities that could lead to a security breach. This capability makes IPS crucial for maintaining the integrity and confidentiality of data within a cloud environment, as it acts as a proactive defense mechanism. When a security threat is identified, the IPS can automatically take protective steps, such as shutting down specific sessions or blocking potentially harmful traffic, thereby minimizing the risk of damage or data loss. In contrast, options like IDS (Intrusion Detection System), while important, only monitor and alert administrators to potential threats without the ability to take direct action against them. Other options, including HIDS (Host-based Intrusion Detection System) and RAID (Redundant Array of Independent Disks), do not serve the same function regarding active threat mitigation. HIDS focuses on monitoring a single host for suspicious activity, and RAID relates to data storage strategies rather than security monitoring.