I. Examine and disseminate how IDPS responses can be classified as an active or passive response.
• An active response is one in which a definitive action is initiated when certain types of alerts are triggered.
• IDPSs with passive response options simply report the information they have already collected and wait for the administrator to take actions.
II. Construct a list of responses that an IDS can be configured to produce:
• Audible/visual alarm.
• SNMP traps and plug-ins.
• E-mail message.
• Phone, pager, or SMS message.
• Log entry.
• Evidentiary packet dump.
• Actions against intruders.
• Launch programs.
• Firewall reconfigurations.