An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity. When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to…

Question

Options

• AIt is retransmitted from the Cisco IPS inline set.
• BThe packets are duplicated and a copy is sent to the destination.
• CIt is transmitted out of the Cisco IPS outside interface.
• DIt is routed back to the Cisco ASA interfaces for transmission.

• A
  94% (60)
• B
  2% (1)
• C
  3% (2)
• D
  2% (1)

Explanation

In inline mode, the IPS physically sits in the traffic path between two network segments via an inline interface pair (inline set). Traffic enters one interface of the set, is inspected, and if permitted, is retransmitted out the other interface of the same inline set toward the destination-acting as a transparent bump-in-the-wire. Packets are not duplicated (B); only one copy traverses the IPS. The outside interface concept (C) applies to routed/NAT deployments, not inline sets. Routing back to ASA interfaces (D) would introduce an unnecessary hop and is not how inline IPS forwarding works.

No community discussion yet for this question.