FCP_FGT_AD-7.6 · Question #119
Refer to the exhibit, which shows the IPS sensor configuration. If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)
The correct answer is C. The sensor will allow attackers matching the Microsoft.Windows.iSCSI.Target.DoS signature. D. The sensor will block all attacks aimed at Windows servers. The sensor will allow attackers matching the Microsoft.Windows.iSCSITarget.DoS signature. The action for this specific signature is set to Monitor, which means FortiGate will only detect and log the activity but will not block or reset the session. The sensor will block all…
Question
Refer to the exhibit, which shows the IPS sensor configuration. If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)
Exhibit
Options
- AThe sensor will reset all connections that match these signatures.
- BThe sensor will gather a packet log for all matched traffic.
- CThe sensor will allow attackers matching the Microsoft.Windows.iSCSI.Target.DoS signature.
- DThe sensor will block all attacks aimed at Windows servers.
How the community answered
(22 responses)- A18% (4)
- B9% (2)
- C73% (16)
Explanation
The sensor will allow attackers matching the Microsoft.Windows.iSCSITarget.DoS signature. The action for this specific signature is set to Monitor, which means FortiGate will only detect and log the activity but will not block or reset the session. The sensor will block all attacks aimed at Windows servers. The general Windows filter is configured with the Block action, so any traffic matching Windows- related attack signatures will be blocked.
Topics
Community Discussion
No community discussion yet for this question.