Which device is primarily associated with dropping packets in the given material?

• A. Firewalls
• B. IDSs
• C. Both A and B
• D. Neither A nor B

Answer: (A)

The idea being tested is how traffic is controlled at the network edge. Firewalls are built to enforce access policies by examining each packet and deciding whether to permit or block it. Dropping packets that don’t meet the rules is a fundamental capability of a firewall, whether through simple rule checks or more advanced stateful inspection. An intrusion detection system, on the other hand, is mainly about monitoring and signaling when something looks suspicious; it doesn’t drop traffic by design unless it’s part of an inline IPS function, which is a different role. So, in typical material, dropping packets is most closely associated with the firewall, making it the best answer.