medium
Single Answer
0Hrant is deploying a network tap that supports an IPS for monitoring. If he wants to ensure that his organization's security remains the same even if the tap and IPS fails, and prefers downtime to a lack of monitoring, what type of failure mode and monitoring deployment should he select?
Answer Options
A
In-line, fail-closed
B
In-line, fail-open
C
Tap, fail-closed
D
Tap, fail-open
Correct Answer: A
Explanation
Hrant's use of an IPS means he wants to be in-line to allow him to block traffic. Since he prefers that a failure remain secure rather than potentially allowing attacks through, he should select a fail-closed implementation.