Which three options represent IDP policy match conditions? (Choose three.)
A.
service
B.
to-zone
C.
attacks
D.
port
E.
destination-address
Which three options represent IDP policy match conditions?
Which three options represent IDP policy match conditions? (Choose three.)
The answer doesn’t make sense.
Page 459: Junos Security Software Guide pdf
Match conditions use the following characteristics to specify the type of network traffic
to be monitored:
• From-zone and to-zone—All traffic flows from a source to a destination zone. You can
select any zone for the source or destination. You can also use zone exceptions to
specify unique to and from zones for each device. Specify any to monitor network traffic
originating from and to any zone. The default value is any.
• Source IP Address—Specify the source IP address from which the network traffic
originates. You can specify any to monitor network traffic originating from any IP
address. You can also specify source-except to specify all sources except the specified
addresses. The default value is any.
• Destination IP address—Specify the destination IP address to which the network traffic
is sent. You can set this to any to monitor network traffic sent to any IP address. You
can also specify destination-except to specify all destinations except the specified
addresses. The default value is any.
• Application—Specify the Application Layer protocols supported by the destination IP
address. You can specify any for all applications and default for the application
configured in the attack object for the rule.