Check_Point
156-315.75 · Question #513
You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a…
The correct answer is D. No. The logs and alert can provide some level of information, but determining whether the attack is. See the full explanation below for the reasoning.
Question
You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?
Options
- AYes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches any
- BNo. These IPS protections will only block the traffic, but it will not provide a detailed analysis of the traffic.
- CNo. To verify if this is a worm or an active attack, you must also enable TCP attack defenses.
- DNo. The logs and alert can provide some level of information, but determining whether the attack is
How the community answered
(58 responses)- A14% (8)
- B7% (4)
- C3% (2)
- D76% (44)
Community Discussion
No community discussion yet for this question.