Marco is noticing several xmas scans on his network. What can he use to prevent this?
A) Implement an IDS to block this flag combination
B) Use port sentry to detect and block port scans
C) Use an IPS to react to the scan by blocking traffic from that source address
D) xmas scans are an outdated technique that won't work anyway. He shouldn't worry about it

Question

Quizplus · Accepted Answer

An IPS (Instrusion Prevention System), is capable of sensing attacks and then reacting to them by making changes to firewall rules on the fly. A network IDS is passive and does not prevent anything, it only detects.

Marco Is Noticing Several Xmas Scans on His Network