Cisco
500-290 · Question #10
Which two operations would put an inline Cisco IPS sensor in detection mode? (Choose two.)
The correct answer is A. subtract all aggressive actions using event action filters D. remove the default event action override, which drops traffic with a risk rating of 90 to 100. See the full explanation below for the reasoning.
Question
Which two operations would put an inline Cisco IPS sensor in detection mode? (Choose two.)
Options
- Asubtract all aggressive actions using event action filters
- Bdecrease the event count using event action filters
- Cincrease the maximum inter-event interval using event action overrides
- Dremove the default event action override, which drops traffic with a risk rating of 90 to 100
- Eenable anomaly detection in detection mode only
How the community answered
(33 responses)- A70% (23)
- B3% (1)
- C18% (6)
- E9% (3)
Community Discussion
No community discussion yet for this question.