Implementing Cisco Network Security (IINS, legacy) — Question 59

Which three statements about host-based IPS are true? (Choose three)

Answer options

Correct answer:

Explanation

The correct answers include A, C, and D. Host-based IPS can view encrypted files when it has access to the decryption keys, uses signature-based policies for detection, and can enforce more restrictive policies tailored to individual hosts compared to network-based IPS. Options B and E are incorrect as host-based IPS is not typically deployed at the perimeter and while it can work with firewalls, that does not define its primary capabilities.