CompTIA Security+ (SY0-701) — Question 595

A security engineer is installing an IPS to block signature-based attacks in the environment.

Which of the following modes will best accomplish this task?

Answer options

• A. Monitor
• B. Sensor
• C. Audit
• D. Active

Correct answer: D

Explanation

The correct choice is D, Active mode, as it actively blocks and prevents signature-based attacks in real-time. The other options, such as Monitor and Sensor, typically only observe or report attacks without taking action, while Audit mode focuses on logging rather than prevention.