Discover and Alert on Threats and Potential Threats

A.

An intrusion detection system (IDS) is implemented to watch network traffic and operations, using predefined criteria or signatures, and alert administrators if anything suspect is found.

An intrusion prevention system (IPS) is similar to an IDS but actually takes action against suspect traffic, whereas an IDS just alerts when it finds anything suspect.

A firewall works at the network level and only takes into account IP addresses, ports, and protocols; it does not inspect the traffic for patterns or content.

A web application firewall (WAF) works at the application layer and provides additional security via proxying, filtering service requests, or blocking based on additional factors such as the client and requests.

The system that is used to employ a variety of different techniques to discover and alert on threats and potential threats to systems and networks is an Intrusion Detection System (IDS).

An IDS is a security technology that monitors network traffic or system activity for malicious activity or policy violations. IDS solutions typically use a combination of signature-based detection, anomaly-based detection, and heuristic or behavioral analysis techniques to detect potential security incidents.

Signature-based detection involves matching traffic against known patterns of malicious activity or attacks, also known as signatures. Anomaly-based detection involves identifying activity that deviates from normal traffic patterns. Heuristic or behavioral analysis involves monitoring traffic for behavior that may be indicative of an attack or threat.

Once an IDS detects an alert, it can generate an alert or log event, and administrators or security personnel can take action to investigate the alert, identify the source of the potential threat, and take remediation actions to prevent the threat from causing harm.

In contrast, Intrusion Prevention Systems (IPS) are designed to not only detect but also prevent potential threats. Firewalls are another type of security technology that control access to network resources and can also provide some level of intrusion detection capabilities. Web Application Firewalls (WAFs) specifically protect web applications by inspecting and filtering incoming web traffic.

Therefore, the correct answer to the question is A. IDS.