You want to implement an IPS rule base action in which matching traffic is dropped.
Which configuration parameter meets this requirement?
A.
no-action
B.
drop-packet
C.
accept
D.
notification
Which configuration parameter meets this requirement?
You want to implement an IPS rule base action in which matching traffic is dropped.
Which configuration parameter meets this requirement?
Action is B
Is there is an accept action in the IPS???
I think so . I fixed this question.
——
Drop Packet
Drops a matching packet before it can reach its destination but does not close the connection. Use this action to drop packets for attacks in traffic that is prone to spoofing, such as UDP traffic. Dropping a connection for such traffic could result in a denial of service that prevents you from receiving traffic from a legitimate source-IP address.
Note: When an IDP policy is configured using a non-packet context defined in a custom signature for any application and has the action drop packet, when IDP identifies an attack the decoder will promote drop_packet to drop_connection. With a DNS protocol attack, this is not the case. The DNS decoder will not promote drop_packet to drop_connection when an attack is identified. This will ensure that only DNS attack traffic will be dropped and valid DNS requests will continue to be processed. This will also avoid TCP retransmission for the valid TCP DNS requests..
I agree with the answer.