Implementing Cisco Network Security (IINS, legacy) — Question 49

When an IPS detects an attack, which action can the IPS take to prevent the attack from spreading?

Answer options

• A. Deploy an antimalware system
• B. Perform a Layer 6 reset
• C. Deny the connection inline

Correct answer:

Explanation

The correct answer is C, as denying the connection inline allows the IPS to immediately stop the attack from continuing. Option A, deploying an antimalware system, is not a direct action taken by an IPS in real-time during an attack. Option B, performing a Layer 6 reset, is not a standard practice for preventing the spread of an attack.