What is most likely to be the cause of this situation?

You are investigating IPS alerts and finding that many of them have been generated by normal network activity. What is most likely to be the cause of this situation?

Question:

What is most likely to be the cause of this situation?

Options:

The IPS is running in promiscuous mode.

Reactive controls are too specific.

Proactive controls are too restrictive.

All IPS signatures have been assigned the Produce Alert action.

Correct Answer

The Correct Answer for this Question is

Proactive controls are too restrictive.

Leave a Comment