You Are Designing an Intrusion Detection Prevention (IDS/IPS) Solution for a Customer

question 707

Multiple Choice

You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet. Which of the following options would you consider? (Choose 2 answers)

• A) Implement IDS/IPS agents on each Instance running in VPC
• B) Configure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.
• C) Implement Elastic Load Balancing with SSL listeners in front of the web applications
• D) Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.

---

Definitions:

Viability

The ability to work successfully or live and grow under certain conditions.

Stimulus-Response Connections

The association between a specific stimulus and a particular response, fundamental to classical and operant conditioning theories.

Information Processing

The method by which individuals intake, analyze, store, and retrieve information, drawing parallels to computer processing.

Drives

Biological needs that motivate an organism to fulfill them, such as hunger, thirst, or the need for warmth.