Which statement correctly describes IDS vs IPS?

• A. IDS detects and logs potential threats; IPS can actively block threats in real time.
• B. IDS blocks threats in real time.
• C. IPS detects and logs potential threats.
• D. IDS and IPS are the same thing.

Answer: (A)

IDS focuses on detection and logging of potential threats, while IPS sits in line with the traffic and can actively block or mitigate threats in real time. This is why the correct statement matches: IDS detects and logs, and IPS can block threats as they’re observed. In practice, IDS raises alerts and records events for security teams to review, but doesn’t stop traffic on its own. IPS, placed inline in the network path, can drop, deny, or modify malicious traffic as it happens. The other options mix up these roles or say they’re the same, which doesn’t reflect how IDS and IPS operate differently.