Which three statements about Cisco host-based IPS solution are true? (Choose three)
A.
It work with deployed firewalls.
B.
It can be deployed at the perimeter
C.
It uses signature-based policies
D.
It can have more restrictive policies than network-based IPS
E.
It can generate alerts based on behavior at the desktop level
F.
It can view encrypted files
Explanation:
The key word here is ‘Cisco’, and Cisco’s host-based IPS, CSA, is NOT signature-based and
CAN view encrypted files.
This question is answered incorrectly elsewhere, replacing the “desktop level” option with “works with deployed firewalls.” I believe this version is correct.