Examine the following options ,when editing global IPS settings, which one determines if the IOS-based IPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for that engine is being compiled?
A.
Enable Engine Fail Closed
B.
Enable Fail Opened
C.
Enable Signature Default
D.
Enable Default IOS Signature
Explanation:
Enable Engine Fail Closed: This option determines if the IOS-based IPS feature will drop or permit traffic for a
particular IPS signature engine while a new signature for that engine is being compiled. If this option is
enabled, traffic is dropped if IPS services are unavailable. If this option were disabled
(which would be known as a fail open configuration), traffic would be passed when IPS
services are unavailable.
