Cisco

500-290 · Question #13

Regarding the Cisco IPS appliance anomaly detection feature, which two of these would be considered scan events? (Choose two.)

The correct answer is A. an unacknowledged TCP SYN E. a unidirectional UDP session. See the full explanation below for the reasoning.

Question

Regarding the Cisco IPS appliance anomaly detection feature, which two of these would be considered scan events? (Choose two.)

Options

Aan unacknowledged TCP SYN
Ban online dictionary password attack
Cexhaustive directory tree traversal on an FTP server
Da scan of all TCP ports on a single destination IP address
Ea unidirectional UDP session

How the community answered

(16 responses)

A
75% (12)
B
13% (2)
C
6% (1)
D
6% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full 500-290 Practice