問題文
A download that an intrusion signature is expected to catch keeps going through a firewall, and the site cannot send that traffic again during business hours. An engineer proposes to reproduce the decision offline with the command that answers policy questions from the search engine. What has to be said about that proposal?
選択肢
- The command answers for the IDP policy when it is run in the context of the logical system that holds the intrusion rules, so the proposal works after the context is named.
- The command answers for the IDP policy only after that traffic has been seen once, so the proposal works from tomorrow and the site can leave the business hours untouched.
- The command answers for security policies alone, so it reports nothing about the IDP policy, and the engineer has to reach the intrusion side through the records and counters that it keeps for itself.
- The command answers for both kinds of policy once the protocol and the two port numbers are supplied, so the proposal works as it stands, and the site is spared from sending that traffic again during the hours that matter.