ISC2 Certified in Cybersecurity (CC) Practice Question
Which security device passively inspects network traffic for malicious patterns and raises alerts to administrators but does not automatically block the traffic?
A Network Intrusion Detection System (NIDS) examines packets traversing the network, compares them with known attack signatures or abnormal behavior, and generates alerts when it detects suspicious activity. Because it is a detection-rather than prevention-technology, it does not alter or drop the traffic it observes. In contrast, an Intrusion Prevention System (IPS) can actively block or reject packets, a stateful firewall enforces predefined access rules, and a Network Address Translation (NAT) device simply remaps IP addresses without performing threat detection.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What distinguishes a NIDS from an IPS?
Open an interactive chat with Bash
How does a NIDS detect malicious patterns or abnormal behavior?
Open an interactive chat with Bash
Why doesn't a NIDS block malicious traffic directly?
Open an interactive chat with Bash
ISC2 Certified in Cybersecurity (CC)
Network Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .