Symantec
250-315 · Question #125
A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection 12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention…
The correct answer is A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host. See the full explanation below for the reasoning.
Question
A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection 12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention technologies. Why would Intrusion Prevention be unable to block all communications from an attacking host?
Options
- AIntrusion Prevention needs the firewall component to block all traffic from the attacking host.
- BIntrusion Prevention blocks the attack only if the administrator wrote a signature for it.
- CIntrusion Prevention definitions are out-of-date.
- DIntrusion Prevention is set to log only.
How the community answered
(52 responses)- A81% (42)
- B6% (3)
- C2% (1)
- D12% (6)
Community Discussion
No community discussion yet for this question.