MENU
An IPS sensor triggers an alarm known as "signature firing". What events may occur in response?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C, D
Get Premium GSLC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
GL
Glory
11 months ago
Wait, can you really block an IP that easily? Sounds too simple.
CE
Celia
11 months ago
I think resetting the TCP connection is also a good move.
DU
Dusti
12 months ago
A log entry is always created for tracking.
FR
Fredric
12 months ago
Definitely dropping those unauthorized packets.
JU
Julene
12 months ago
Blocking the attacker's IP is a must!
MA
Marshall
1 year ago
I'm a bit confused about the TCP connection reset option. I don't recall if that's typically done for signature firing events.
KA
Karon
1 year ago
Creating a log entry definitely sounds right. I feel like that's a standard procedure for any security alert.
RY
Ryan
1 year ago
I remember practicing a question where unauthorized packets were dropped as a response. That seems like a solid choice here too.
TA
Tasia
1 year ago
I think blocking the attacker's IP address is a common response, but I'm not entirely sure if that's always the case.
AL
Alana
1 year ago
I'm leaning towards (iii) as well. Just because something is legal doesn't mean it's the right thing to do ethically.
DO
Dong
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions a delay in the Cisco Extension Mobility service recognizing the button press, so I might look into network latency issues as a possible cause.
FA
Fannie
1 year ago
Combining variables is a great idea! I hadn't thought of that, but it could be really helpful for reducing the number of inputs while still capturing the key information. I'm going to make sure to explore that option.