A Web Company Is Looking to Implement an Intrusion Detection

question 112

Multiple Choice

A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC. How should they architect their solution to achieve these goals?

• A) Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous mode packet sniffing to see an traffic across the VPC.
• B) Create a second VPC and route all traffic from the primary application VPC through the second VPC where the scalable virtualized IDS/IPS platform resides.
• C) Configure servers running in the VPC using the host-based 'route' commands to send all traffic through the platform to a scalable virtualized IDS/IPS.
• D) Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform for inspection.

---

Definitions:

Complete Combustion

A combustion reaction where the fuel is entirely consumed, producing only carbon dioxide, water, and energy, assuming ample oxygen supply.

Decane

A saturated hydrocarbon with the formula C10H22, consisting of a chain of ten carbon atoms.

Moles

A unit of measurement used in chemistry to express amounts of a chemical substance, defined as the amount of any substance that contains as many elementary entities as there are atoms in 12 grams of pure carbon-12.

Line Angle Drawing

A simplified structural formula used in organic chemistry, where lines represent bonds between carbon atoms, and carbon and hydrogen atoms are often not shown for simplicity.