What are two actions that an IPS can perform whenever a signature detects the activity for which it is configured? (Choose two.)
- disable the link
- reconverge the network
- drop or prevent the activity
- allow the activity
- restart the infected device
Explanation: Depending on the signature type and the platform, whenever a signature detects the activity for which it is configured the IPS may:
log the activity
drop or prevent the activity
reset a TCP connection
block future activity
allow the activity
Exam with this question: Checkpoint Exam: Intrusion Prevention Group Exam Answers
Please login or Register to submit your answer