Cisco
600-199 · Question #6
Which event is likely to be a false positive?
The correct answer is B. a signature addressing an ActiveX vulnerability alert on a Microsoft developer network documentation page. See the full explanation below for the reasoning.
Question
Which event is likely to be a false positive?
Options
- AInternet Relay Chat signature with an alert context buffer containing #IPS_ROCS Yay
- Ba signature addressing an ActiveX vulnerability alert on a Microsoft developer network documentation page
- Can alert for a long HTTP request with an alert context buffer containing a large HTTP GET request
- DBitTorrent activity detected on ephemeral ports
How the community answered
(35 responses)- A11% (4)
- B80% (28)
- C3% (1)
- D6% (2)
Community Discussion
No community discussion yet for this question.