Question: I am studying Security Fundamentals on Networks and as a part of an excercise I have the following question:

```
Which of the following statements are true? (Select all that apply)

a.- An IDS deals with malicious traffic that the firewall missed.

b.- An IPS is on the boundary of the trusted inside and the untrusted outside.

c.- A network-based firewall protects hosts from malicious traffic originating on their same network.

d.- An IPS protects hosts from malicious traffic originating on their same network.

```

What could be the answers? According to me, **b** and **c** would be the answers because an IPS protects the original traffic that pass through, **b** because it is in the boundary but I have a doubt with option **a** because and IDS as I know makes a copy of the traffic just to analyze it.

Answer: 
I would say 

A False, as IDS only notifies and does not prevent intrusion. So the missed traffic will pass. 

B TRUE

C False as network-based firewall will inspect all packets that are originating from both the local and outside networks. (in case they pass the firewall)

D False, the same as C.
My Answer is:

A - True - traffic that evades the firewalls will be deal with IDS and IPS.

B - False- A Firewall sits on the border between the trusted inside and the untrusted outside.

C - True - A network vulnerable to malicious traffic originating
from that very network.

D - True - IPS as a control device is in-line, so original traffic must pass through the IPS.