You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet. Which of the following options would you consider?
A. Implement IDS/IPS agents on each Instance running In VPC
B. Configure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.
C. Implement Elastic Load Balancing with SSL listeners In front of the web applications
D. Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.
Answer:
A. Implement IDS/IPS agents on each Instance running In VPC
D. Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.
You might also like to view...
When you have minimal changes in the workbook, or want to see changes at a glance, you would use ________
A) in file highlighting B) no highlighting C) onscreen highlighting D) onscreen low lighting
Which of the following configuration passes is used to apply packages to a Windows 10 image after it is copied to the computer hard drive, but before it is running?
A. windowsPE B. offlineServicing C. specialize D. oobeSystem