SNCF — Securing Networks with Firepower — Question 97

A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?

Answer options

• A. failsafe
• B. inline tap
• C. promiscuous
• D. bypass

Correct answer: B

Explanation

The inline tap mode allows the Cisco IPS to monitor traffic without interfering with data flows, making it ideal for collecting baseline data. The failsafe and bypass modes do not provide monitoring capabilities, while the promiscuous mode does not prevent traffic disruption either.