The Security Operations Center (SOC) Just Purchased a New Intrusion

The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability. What would be the BEST approach for the CISO to reassure the IT group?

A) Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility
B) Work with the IT group and tell them to put IPS in-line and say it won't cause any network impact
C) Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn't block any legitimate traffic
D) Explain to the IT group that the IPS won't cause any network impact because it will fail open

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free