Implementing Cisco Network Security (IINS, legacy) — Question 128

What three actions are limitations when running IPS in promiscuous mode? (Choose three.)

Answer options

• A. deny attacker
• B. deny packet
• C. modify packet
• D. request block connection
• E. request block host
• F. reset TCP connection

Correct answer: A, B, C

Explanation

When an IPS is running in promiscuous mode, it can monitor traffic but cannot take direct action to block or alter it. Therefore, actions such as denying an attacker, denying a packet, and modifying a packet are not possible, making options A, B, and C correct. The other options involve requests for blocking or resetting connections, which are actions that can be initiated in active mode.