Cisco
700-295 · Question #23
Which two methods can be used together to configure a Cisco IPS signature set into detection mode when tuning the Cisco IPS appliance to reduce false positives? (Choose two.)
The correct answer is A. Subtract all aggressive actions using event action filters. E. Increase the maximum inter-event interval of the signature. See the full explanation below for the reasoning.
Question
Which two methods can be used together to configure a Cisco IPS signature set into detection mode when tuning the Cisco IPS appliance to reduce false positives? (Choose two.)
Options
- ASubtract all aggressive actions using event action filters.
- BEnable anomaly detection learning mode.
- CEnable verbose alerts using event action overrides.
- DDecrease the number of events required to trigger the signature.
- EIncrease the maximum inter-event interval of the signature.
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C4% (1)
- D12% (3)
Community Discussion
No community discussion yet for this question.