MENU
An engineer receives an incident ticket with hundreds of intrusion alerts that require investigation. An analysis of the incident log shows that the alerts are from trusted IP addresses and internal devices. The final incident report stated that these alerts were false positives and that no intrusions were detected. What action should be taken to harden the network?
Suggested Answer: C
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
1 comments · newest first
TE
Tesha
13 hours ago
I remember studying about the placement of IPS systems, but I'm not sure if moving it before or after the firewall is the best option in this case.