Which alert would indicate an intrusion attempt has been blocked?

• A. Malware URL Alerts
• B. Intrusion Attempt Alerts
• C. Phishing Alerts
• D. Blocked Devices Alerts

Answer: (B)

Intrusion Attempt Alerts are the signals that an attempted breach was detected and blocked by the security stack. When the system spots an exploit attempt, suspicious traffic, or a brute-force login and prevents it, it generates this alert to notify admins. Malware URL Alerts track access to known malicious web addresses; Phishing Alerts warn about deceptive emails or messages; Blocked Devices Alerts indicate that a device has been prevented from connecting or has been quarantined due to policy or risk. Thus, the alert that best indicates an intrusion attempt has been blocked is Intrusion Attempt Alerts.