Which system actively defends a network by both detecting and preventing attacks?

Optimize your success on the FSNA Readiness Exam. Engage with flashcards and multiple choice questions, each designed with hints and explanations. Prepare thoroughly for your test and excel!

The main idea here is an intrusion prevention system that operates inline to both detect and block threats as traffic moves through the network. A network-based IPS sits in the path of network traffic and analyzes packets in real time, matching known attack patterns or unusual behavior and actively blocking or dropping malicious activity as it’s identified. This provides immediate defense across the entire network, not just on a single device. In contrast, a network IDS only detects and alerts about suspicious activity without actively stopping it. A host-based IPS protects an individual host rather than the whole network, and a network firewall focuses on enforcing access rules rather than continuously detecting and interrupting intrusions. So the system that best fits “actively defends a network by both detecting and preventing attacks” is the network-based intrusion prevention system.