Cisco Cyber Security Practice Exam

Which system monitors network traffic and provides reports without taking any action?

1. IPS

2. IDS

3. Firewall

4. Router

The correct answer is: IDS

The system that monitors network traffic and provides reports without taking any action is the Intrusion Detection System (IDS). An IDS is designed to observe network traffic and analyze it for any suspicious activity or policy violations. When an anomaly or potential threat is detected, the IDS generates alerts or reports for network administrators, allowing them to understand and respond to potential security incidents. However, it does not actively intervene or block the traffic; rather, its role is solely to detect and notify. In contrast, an Intrusion Prevention System (IPS) not only detects threats but also takes action by blocking or mitigating malicious activity. Firewalls are primarily focused on controlling incoming and outgoing network traffic based on predetermined security rules, and routers manage data traffic between networks, without specializing in threat detection or reporting. Thus, the defining characteristic of an IDS is its passive nature in monitoring and reporting, which is why it is the correct answer in this context. Understanding this distinction helps in selecting the right security measures based on the organization's needs for proactive versus reactive security solutions.