nerdexam
Check_Point

156-915.76 · Question #42

You enable Sweep scan Protection and Host port scan in IPS to determine n a large amount of traffic from a specific internal IP address is network attack, or a user's system is infected with a worm…

The correct answer is B. No. The logs and alert can provide some level of information, but determining whether the attack is. See the full explanation below for the reasoning.

Question

You enable Sweep scan Protection and Host port scan in IPS to determine n a large amount of traffic from a specific internal IP address is network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?

Options

  • ANo. To verify if tins is a worm or an active attack, you must also enable TCP attack defenses
  • BNo. The logs and alert can provide some level of information, but determining whether the attack is
  • CYes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches
  • DNo. These PS protections will only block the traffic, but it will not provide a detailed analysis of the traffic

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    73% (24)
  • C
    15% (5)
  • D
    6% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-915.76 Practice