Which three Cisco IPS sensor features are configured within an event action rule? (Choose three.)
A.
event action overrides
B.
target value rating
C.
use global correlation
D.
use reputation filter
E.
event action filters
F.
enable TCP state bypass
G.
blocking properties
Explanation:
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/securi ty_manager/4.1/user/guide/ipsevact.html
