You are configuring Cisco IPS Sensor Anomaly Detection and have just set the scanner threshold to 48. What will this accomplish?
A.
A maximum of 48 scanners can be present on the network before an Anomaly Detection signature will be triggered.
B.
If there are more than 48 unestablished connections from a single source to different destination IP addresses, an Anomaly Detection signature will be triggered.
C.
The scheduler will replace the knowledge base every 48 hours.
D.
If there are more than 48 sources generating at least one unestablished connection to different destination IP addresses, an Anomaly Detection signature will be triggered.
E.
The histogram high threshold will be set to 48 destination IP addresses.