Question

8. An intrusion prevention system can either wait until it has all the information it needs or can allow packets through based on statistics (guessed or previously known facts). What are the advantages and disadvantages of each approach?

Answer 1

Explanation:

Remember, any network security system that constantly monitors a network infrastructure in other to detect and prevent threats to the network is called an intrusion prevention system (IPS.

Many experts agree that a major advantage of waiting until the intrusion system has all the information it needs is that it would allow for easy sensing of a packet drop that can stop the trigger packet.