PrepAway - Latest Free Exam Questions & Answers

How should they architect their solution to achieve the…

A web company is looking to implement an intrusion detection and prevention system into their deployed VPC.
This platform should have the ability to scale to thousands of instances running inside of the VPC.
How should they architect their solution to achieve these goals?

PrepAway - Latest Free Exam Questions & Answers

A.
Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous
mode packet sniffing to see an traffic across the VPC.

B.
Create a second VPC and route all traffic from the primary application VPC through the second VPC where
the scalable virtualized IDS/IPS platform resides.

C.
Configure servers running in the VPC using the host-based ‘route’ commands to send all traffic through the
platform to a scalable virtualized IDS/IPS.

D.
Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS
platform for inspection.

PrepAway - Latest Free Exam Questions & Answers

5 Comments on “How should they architect their solution to achieve the…

  1. qwerty says:

    The answer is B – many companys have implemented this.
    The P in IPS is “prevention”. Sending logs to a system (Answer D) will not prevent anything.




    13



    3
  2. hwinho says:

    This platform should have the ability to scale to thousands of instances running inside of the VPC.

    D. You can’t be installing agents on thousands of instances.

    B. is the right answer




    6



    7

Leave a Reply

Your email address will not be published. Required fields are marked *