You want to block access to the website ww.eicar.org using a custom IPS signature. Which custom IPS signature should you configure?

Question

Options

• AF-SBID ( --name "detect_eicar"; --protocol udp; --service ssl; --flow from_client; --pattern
• BF-SBID ( --name "eicar"; --protocol udp; --flow from_server; --pattern "eicar"; --context host;)
• CF-SBID ( --name "detect_eicar"; --protocol tcp; --service dns; --flow from_server; --pattern "eicar"; -
• DF-SBID ( --name "eicar"; --protocol tcp; --service HTTP; --flow from_client; --pattern

• A
  5% (1)
• B
  5% (1)
• C
  14% (3)
• D
  77% (17)

Explanation

Option D is the correct answer because it specifically blocks access to the website browsing. The other options either use the wrong protocol (UDP), the wrong service (DNS or

No community discussion yet for this question.