You want to create a custom IDP signature for a new HTTP attack on your SRX device. You
have the exact string that identifies the attack. Which two additional elements do you need
to define your custom signature? (Choose two.)
A.
protocol number
B.
direction
C.
source IP address of the attacker
D.
service context
Explanation:
active-policy testidp;
custom-attack myattack {
severity major;
attack-type {
signature {
context ftp-get-filename;
pattern “.*\.\[exe\]”;
direction client-to-server;