Check_Point
156-315.76 · Question #496
You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a…
The correct answer is D. No. The logs and alert can provide some level of information, but determining whether the attack. See the full explanation below for the reasoning.
Question
You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?
Options
- AYes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches
- BNo. These IPS protections will only block the traffic, but it will not provide a detailed analysis of
- CNo. To verify if this is a worm or an active attack, you must also enable TCP attack defenses.
- DNo. The logs and alert can provide some level of information, but determining whether the attack
How the community answered
(25 responses)- A16% (4)
- B8% (2)
- C4% (1)
- D72% (18)
Community Discussion
No community discussion yet for this question.