A Host-based Intrusion Prevention System (HIPS) acts as a preventive control by actively blocking threats and a detective control by monitoring and alerting to suspicious activities on endpoints. Reference: CompTIA Security+ SY0-701 Official Study Guide, Domain 3.3: "HIPS combines preventive and detective capabilities to secure endpoints." Exam Objectives 3.3: "Summarize various security control types and methods."