Which of the following is the correct ordering of Huawei's intrusion prevention feature configuration process?

Question

Options

• AConfigure intrusion prevention file->Upgrade signature database->Configure
• BUpgrade signature database->Configure intrusion prevention files->Deploy signature->Verification
• CConfigure signature->Upgrade signature database->Configure intrusion prevention
• DUpgrade signature database->Configure signature->Configure intrusion prevention

• A
  4% (1)
• B
  7% (2)
• C
  19% (5)
• D
  70% (19)

Explanation

Option D reflects the only logical dependency chain: you must upgrade the signature database first because the signatures you configure in step two must actually exist in the database - configuring signatures against a stale or empty database is meaningless. Once the database is current, you configure which signatures are active and what actions they trigger. Only then can you configure intrusion prevention profiles that reference those signatures, making them operational.

Why the distractors fail:

• A puts "Configure intrusion prevention file" before the database is upgraded, meaning the profile would reference outdated or missing signatures - and it omits key steps entirely.
• B includes "Deploy signature" and "Verification" steps that sound reasonable but buries "Configure intrusion prevention files" before signatures are individually configured, breaking the dependency order.
• C attempts to configure signatures before upgrading the database, which is backwards - you need current signature data to know what you're configuring.

Memory tip: Think "Data before Detail before Deployment" - you need the data (upgraded DB) before you can specify the details (which signatures), before you can deploy the prevention profile. The database is the foundation; everything else builds on top of it.

No community discussion yet for this question.