How does Intrusion prevention support the objective “detects and actively blocks known malicious network traffic patterns”?

Question

SecurityTalent knowledge answer. Members may add responsible, source-based context; do not post secrets, personal data, exam dumps or recalled live exam questions.

 · Accepted Answer

Intrusion prevention is a cybersecurity control or practice. It supports this objective: detects and actively blocks known malicious network traffic patterns. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.

CIS Critical Security Controls v8: https://www.cisecurity.org/controls/v8