試験6V0-21.25 トピック5 問題76 スレッド
VMware 6V0-21.25のリアル試験問題集
問題 #: 76
トピック #: 5
問題 #: 76
トピック #: 5
Which of the following is a benefit of combining Distributed IDS/IPS with Gateway IDS/IPS?
おすすめの解答：A 解答を投票する
A core principle of a mature Zero-Trust architecture is pervasive inspection. While Distributed IDS/IPS and Gateway IDS/IPS can be deployed independently, combining them provides the ultimate defense-in-depth posture.
Distributed IDS/IPS: Because it sits directly at the vNIC of the hypervisor, it inspects internal laterally moving traffic (East/West) before it is encapsulated or encrypted, catching internal threat actors or worms spreading between VMs.
Gateway IDS/IPS: Because it sits on the Tier-0 or Tier-1 Edge Node, it inspects traffic crossing the data center perimeter (North/South). Crucially, the Gateway handles heavy TLS Decryption/Proxying to inspect malicious payloads hiding inside HTTPS traffic entering from the internet.
By combining both, you cover all possible attack vectors across the entire infrastructure topology.
Distributed IDS/IPS: Because it sits directly at the vNIC of the hypervisor, it inspects internal laterally moving traffic (East/West) before it is encapsulated or encrypted, catching internal threat actors or worms spreading between VMs.
Gateway IDS/IPS: Because it sits on the Tier-0 or Tier-1 Edge Node, it inspects traffic crossing the data center perimeter (North/South). Crucially, the Gateway handles heavy TLS Decryption/Proxying to inspect malicious payloads hiding inside HTTPS traffic entering from the internet.
By combining both, you cover all possible attack vectors across the entire infrastructure topology.
中岛** 2026-07-07 05:18:11
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。