Fortinet
FCNSP · Question #45
The following ban list entry is displayed through the CLI. get user ban list id cause src-ip-addr dst-ip-addr expires created 531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33…
The correct answer is A. The administrator has specified the Attack and Victim Address method for the quarantine. See the full explanation below for the reasoning.
Question
The following ban list entry is displayed through the CLI. get user ban list id cause src-ip-addr dst-ip-addr expires created 531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008 Based on this command output, which of the following statements is correct?
Options
- AThe administrator has specified the Attack and Victim Address method for the quarantine.
- BThis diagnostic entry results from the administrator running the diag ips log test command. This command
- CA DLP rule has been matched.
- DAn attack has been repeated more than once during the holddown period; the expiry time has been reset
How the community answered
(44 responses)- A80% (35)
- B11% (5)
- C7% (3)
- D2% (1)
Community Discussion
No community discussion yet for this question.