You implement Traffic Anomaly detection and you find numerous alerts of port scans from your security auditing team that you want to ignore. You create an address book entry for the security audit…

Question

Options

• ACreate a rule at the top of the Traffic Anomaly rule base to ignore traffic from security audit team,
• BCreate a rule at the top of the Traffic Anomaly rulebase to ignore traffic from security audit team.
• CCreate a rule at the top of the IDP rulebase to ignore traffic from security audit team, and make
• DCreate an exempt rule for the security audit team in the Exempt rulebase to ignore Traffic Anomalies.

• A
  3% (2)
• B
  72% (42)
• C
  9% (5)
• D
  16% (9)

No community discussion yet for this question.