Example Concept: An IDS is a passive monitoring system that detects suspicious activities and generates alerts for security teams to investigate. It analyzes network traffic against known threat signatures and anomalies but does not take direct action to block threats. In contrast, an IPS is an active system that not only detects threats but also automatically takes preventive measures, such as blocking malicious traffic or resetting connections, to stop potential attacks in real-time. Both systems can be deployed inline with network traffic, but IPS requires more precise configuration to avoid false positives that could disrupt legitimate traffic.