Question

Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first?
a.The network router sends traffic to the firewall as well as to the IDS
b.The IDS warns the firewall of suspicious traffic
c.Messages from the IDS are routed to the network security team
d.Network security team decides to block traffic from that IP address

Answer 1

Answer:

a.

Explanation:

Based on the information provided within the question it can be said that the first event to occur is that the network router sends traffic to the firewall as well as to the IDS. This is because the information entering your network has to pass through the router which determines which devices connect to the network receive this information. Since you have an IDS set up then the information would pass through the IDS before reaching your device, which if the IDS detects it as suspicious traffic it will warn the firewall.