儿科护理相关专业知识
单选题Which statement about IDS/IPS design is correct?（）A An IPS should be deployed if the security policy does not support the denial of traffic.B An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C An IDS analyzes a copy o
题目
An IPS should be deployed if the security policy does not support the denial of traffic.
An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.
An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.
Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
相似问题和答案
第1题：
A.基于防火墙的IPS部署
B.基于软件的IPS部署
C.基于网络的IPS部署
D.基于主机的IPS部署
第2题：
IPS与IDS的区别是（）
- A、IDS是1种检测技术，IPS是一种阻断技术
- B、IDS并联在网络上的设备，IPS是串接在网络上的设备
- C、IPS属于审计类产品；IDS属于访问控制类产品
- D、IPS会检测并主动防御。而IDS却只会检测然后交由防火墙处理
正确答案:A,B,D
第3题：
IPS和IDS都是主动防御系统。( )
第4题：
Which statement describes the behavior of a security policy？（）
- A、The implicit default security policy permits all traffic.
- B、Traffic destined to the device itself always requires a security policy.
- C、Traffic destined to the device’s incoming interface does not require a security policy.
- D、The factory-default configuration permits all traffic from all interfaces.
正确答案:C
第5题：
As a critical part of the design for the Enterprise Campus network， which of the following two aretrue concerning intrusion detection and prevention solution？ （）
- A、 IDS is capable of both inline and promiscuous monitoring， while IPS is only capable ofpromiscuous monitoring
- B、 IDS will stop malicious traffic from reaching its intended target for certain types of attacks.
- C、 IPS processes information on Layer 3 and 4 as well as analyzing the contents and payload ofthe packets for more sophisticated embedded attacks （Layers 3 to 7）
- D、 IPS inspects traffic statefully and needs to see both sides of the connection to function properly
- E、 IDS placement at the perimeter of Data Center outside the firewall generates many warningsthat have relatively low value because no action is likely to be taken on this information
正确答案:C,E
第6题：
With which three tasks does the IPS Policies Wizard help you？ （）
- A、Selecting the interface to which the IPS rule will be applied
- B、Selecting the Signature Definition File （SDF） that the router will use
- C、Selecting the direction of traffic that will be inspected
- D、Selecting the inspection policy that will be applied to the interface
正确答案:A,B,C
第7题：
下面关于IDS、IPS说法正确的是？（）
- A、IDS仅局限于检测
- B、IDS主动响应手段不足、防火墙联动并不能有效相应攻击
- C、IPS采用在线串接部署
- D、IPS将在具备丰富的主动响应手段
正确答案:A,B,C,D
第8题：
A. An IPS should be deployed if the security policy does not support the denial of traffic.
B. An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.
C. An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.
D. Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
第9题：
Which statement about IDS/IPS design is correct?（）
- A、An IPS should be deployed if the security policy does not support the denial of traffic.
- B、An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.
- C、An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.
- D、Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
正确答案:C
第10题：
IPS是IDS的替代产品。
正确答案:正确