Which statement correctly distinguishes active defense measures from passive defense measures, and which examples illustrate each?

Which statement correctly distinguishes active defense measures from passive defense measures, and which examples illustrate each?

• A. Active defense reduces risk by design (segmentation, encryption); passive defense detects and disrupts attackers (IPS, deception technologies)
• B. Active defense is only for military; passive is for civilians
• C. Active defense includes backups; passive defense includes IDS
• D. Passive defense seeks to detect and disrupt attackers; active defense reduces risk by design

Answer: (A)