CND Network Perimeter Protection Practice Question
A security analyst is reviewing logs from a host-based Intrusion Prevention System (HIPS). The system successfully identified and blocked an injection attack by terminating the offending process instantly. What type of proactive preventive action did the HIPS execute?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Active Response / Process Termination
Active response mechanisms in HIPS include terminating malicious processes, resetting network connections, or modifying firewall rules automatically upon detecting a threat signature.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DNS Sinkholing
Why it's wrong here
DNS sinkholing redirects malicious domain resolution requests, which is a network-level control rather than process termination.
- ✓
Active Response / Process Termination
Why this is correct
Terminating the malicious process actively stops the attack execution in real-time.
- ✗
Passive Log Alerting
Why it's wrong here
Passive logging only records events for later review without stopping the active attack.
- ✗
Vulnerability Patch Management
Why it's wrong here
Patch management is a remediation step applied post-assessment, not a real-time HIPS runtime prevention action.
About these practice questions
Courseiva writes every CND question from scratch — 323 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CND practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CND exam.