Which solution would meet the requirement to observe and be alerted in the event of a security breach, while allowing a response for each alert?

Which solution would meet the requirement to observe and be alerted in the event of a security breach, while allowing a response for each alert?

• A. XaaS
• B. IDS
• C. PaaS
• D. IPS

Answer: (B)

Observing and alerting about security breaches while enabling a response for each alert requires a monitoring system that can detect suspicious activity and notify responders. An Intrusion Detection System does exactly this by watching network or host activity and generating alerts when it senses potential threats. This provides visibility into breaches as they occur and supports an incident-response workflow where each alert can be investigated and acted upon. The system is typically passive, focusing on detection and notification rather than automatic blocking, which preserves the ability to respond to every alert in a controlled, manual way. In contrast, an Intrusion Prevention System operates inline and can automatically block or mitigate traffic to stop attacks, which reduces the need for per-alert human intervention. While useful, automatic blocking means actions aren’t always taken on a per-alert basis by a human responder. The other options describe cloud service delivery models rather than security monitoring capabilities and don’t address detection and alerting.

Observing and alerting about security breaches while enabling a response for each alert requires a monitoring system that can detect suspicious activity and notify responders. An Intrusion Detection System does exactly this by watching network or host activity and generating alerts when it senses potential threats. This provides visibility into breaches as they occur and supports an incident-response workflow where each alert can be investigated and acted upon. The system is typically passive, focusing on detection and notification rather than automatic blocking, which preserves the ability to respond to every alert in a controlled, manual way.

In contrast, an Intrusion Prevention System operates inline and can automatically block or mitigate traffic to stop attacks, which reduces the need for per-alert human intervention. While useful, automatic blocking means actions aren’t always taken on a per-alert basis by a human responder. The other options describe cloud service delivery models rather than security monitoring capabilities and don’t address detection and alerting.