Juniper
JN0-633 · Question #84
Click the Exhibit button. An attacker is using a nonstandard port for HTTP for reconnaissance into your network. Referring to the exhibit, which two statements are true? (Choose two.)
The correct answer is B. The IPS engine will detect the application regardless of the nonstandard port. D. The IPS engine will perform application identification until it processes the first 256 bytes of the packet. prevention-idp-rulebase-default-service-usage.html
Advanced Security Services (IDP, UTM)
Question
Click the Exhibit button. An attacker is using a nonstandard port for HTTP for reconnaissance into your network. Referring to the exhibit, which two statements are true? (Choose two.)
Exhibit
Options
- AThe IPS engine will not detect the application due to the nonstandard port.
- BThe IPS engine will detect the application regardless of the nonstandard port.
- CThe IPS engine will perform application identification until the session is established.
- DThe IPS engine will perform application identification until it processes the first 256 bytes of the packet.
How the community answered
(41 responses)- A10% (4)
- B73% (30)
- C17% (7)
Explanation
prevention-idp-rulebase-default-service-usage.html
Topics
#IPS application identification#nonstandard port#AppID#deep packet inspection
Community Discussion
No community discussion yet for this question.