210-260 · Question #82
Which three statements about Cisco host-based IPS soluations are true? (Choose three.)
The correct answer is A. It can view encrypted files. B. It can have more restrictive policies than network-based IPS. C. It can generate alerts based on behavior at the desktop level. If the network traffic stream is encrypted, HIPS has access to the traffic in unencrypted form. HIPS can combine the best features of antivirus, behavioral analysis, signature filters, network firewalls, and application firewalls in one package. Host-based IPS operates by…
Question
Which three statements about Cisco host-based IPS soluations are true? (Choose three.)
Options
- AIt can view encrypted files.
- BIt can have more restrictive policies than network-based IPS.
- CIt can generate alerts based on behavior at the desktop level.
- DIt can be deployed at the perimeter.
- EIt uses signature-based policies.
- FIt works with deployed firewalls.
How the community answered
(65 responses)- A91% (59)
- D3% (2)
- E2% (1)
- F5% (3)
Explanation
If the network traffic stream is encrypted, HIPS has access to the traffic in unencrypted form. HIPS can combine the best features of antivirus, behavioral analysis, signature filters, network firewalls, and application firewalls in one package. Host-based IPS operates by detecting attacks that occur on a host on which it is installed. HIPS works by intercepting operating system and application calls, securing the operating system and application configurations, validating incoming service requests, and analyzing local log files for after-the-fact suspicious activity.
Topics
Community Discussion
No community discussion yet for this question.