Which Device Analyzes Internet Attacks Without Affecting Latency?
Which of the following would allow a network administrator to analyze attacks coming from the internet without affecting latency?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the difference between passive IDS monitoring and inline IPS/firewall enforcement; the trap is choosing IPS because it also analyzes attacks, but it actively affects traffic flow and adds latency.
In the CompTIA Network+ N10-009 exam, this question asks which security device can analyze internet attacks without introducing latency. The community unanimously agrees the answer is B, IDS, because it passively monitors traffic out-of-band rather than actively interfering with the flow.
A. IPS is the most common mistake because it also analyzes attacks, but it sits inline and can block or modify traffic, which affects latency. The question specifically requires a device that does not affect latency, so the passive IDS is correct.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option B, IDS (Intrusion Detection System), is correct because it inspects copies of network traffic rather than handling packets in-line. As comment [1] explains, an IDS 'monitors network traffic and analyzes attacks without actively interfering with the traffic flow, ensuring it does not affect latency.' It operates passively and sends alerts to administrators, making it ideal for analyzing internet attacks without adding delay.Why the Other Options Are Wrong
Option A, IPS, is a tempting choice because it also inspects packet contents, but it is deployed in-line and can block or reject traffic, which adds latency. Option D, Firewall, filters traffic and also resides in-line, affecting latency depending on rule complexity. Option C, Load balancer, distributes traffic across servers and is not primarily an attack-analysis security tool, so it is irrelevant to the scenario.Community Comment Notes
All three useful comments confidently select B and emphasize the passive nature of IDS. Comment [2] clearly distinguishes IDS from IPS, noting that an IPS 'can react to an attack by blocking traffic, while an IDS can only notify a person or device of the attack.' This supports the core reason why IDS is the only option that meets the 'without affecting latency' requirement.Official Reference
Exam Strategy
In Network+ exam questions, watch for keywords like 'does not affect latency,' 'passively,' or 'monitor'—these point to IDS rather than IPS. Remember the distinction: IDS uses a SPAN port or tap to inspect traffic out-of-band, while an IPS is installed inline and can drop or block packets, which always has some performance impact.
Related Analysis
Practice All N10-009 Questions
Access 100 questions with complete answers and detailed explanations.
View Full N10-009 Practice Test →