Implementing Cisco Network Security (IINS, legacy) — Question 127

Which three statements about host-based IPS are true? (Choose three.)

Answer options

• A. It can view encrypted files.
• B. It can have more restrictive policies than network-based IPS.
• C. It can generate alerts based on behavior at the desktop level.
• D. It can be deployed at the perimeter.
• E. It uses signature-based policies.
• F. It works with deployed firewalls.

Correct answer: A, B, C

Explanation

The correct answers are A, B, and C because host-based IPS can analyze encrypted files, implement stricter security policies compared to network-based IPS, and monitor desktop-level behaviors for alert generation. Options D and F are incorrect as host-based IPS is typically deployed on individual hosts rather than at the perimeter and does not rely solely on firewalls.