Which statements about the Cisco IPS anomaly detection feature are true? (Choose three.)
A. The histogram is used to detect multiple scanners.
B. Once a scanner threshold is violated, an alert is triggered for the multiple scanner signature.
C. The scanner threshold is used to detect a single scanner.
D. Once the multiple scanners alert is triggered, the learning period will begin.
E. The illegal zone should contain non-allocated internal IP addresses.
F. The traffic anomaly signature engine contains only two anomaly detection signatures (signature ID 13000 and 13001).
Related Resources
Cisco White Papers
Related Course
CCNP Security e-Camp
CCNA Security Question of the week Series
- CCNA Security Question of the Week: Application Layer Firewall
- CCNA Security Question of the Week: Enable Secret
- CCNA Security Question of the Week: Cisco Configuration Professional
- CCNA Security Question of the Week: Secure Network Management
- CCNA Security Question of the Week: Enterprise Installation
- CCNA Security Question of the Week: Access Control List
- CCNA Security Question of the Week: ASA Access List
- CCNA Security Question of the Week: AAA Login Authentication
- CCNA Security Question of the Week: Traffic Class
- CCNA Security Question of the Week: IPS Alerts
- CCNP Security Question of the Week: IPS Anomaly Detection Features
Please support our Sponsors here :