$55\mathrm{.}6\%$ complete

Question

The IT manager of a medium$-$sized organization is designing a new network infrastructure to secure its enterprise infrastructure by implementing an Intrusion Prevention System $($IPS$)$ and an Intrusion Detection System $($IDS$).$ The manager is considering different deployment methods for the IPS$/$IDS to optimize their effectiveness. The organization's network includes multiple security zones, a virtual private network $($VPN$)$ for remote access, and a web application firewall $($WAF$).$ Which deployment method provides the MOST comprehensive protection in this scenario?

A$.$Deploy the IPS$/$IDS devices in tap$/$monitor mode at the entry and exit points of the VPN tunnel.

B$.$Deploy the IPS$/$IDS devices in passive mode within the internal network.

C$.$Deploy the IPS$/$IDS devices in inline mode at the network perimeter.

D$.$Deploy the IPS$/$IDS devices in inline mode next to the WAF.