CompTIA Network+ (N10-007) — Question 631
An organization wants to implement a device that will protect its server farm by looking for anomalous traffic and alerting an administrator to take action. Which of the following would be the BEST device for an organization?
Answer options
- A. An IPS appliance
- B. A proxy server
- C. An IDS appliance
- D. A content filter server
Correct answer: C
Explanation
The correct choice is C, an IDS appliance, as it is specifically designed to detect and alert on anomalous traffic. An IPS appliance (A) actively blocks threats, while a proxy server (B) primarily serves to manage and filter requests, and a content filter server (D) focuses on controlling web content rather than monitoring traffic patterns.