NSE 7 – Network Security Architect — Question 20

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

Answer options

• A. Determines the optimal number of IPS engines required based on system load.
• B. Downloads signatures on demand from FDS based on scanning requirements.
• C. Determines when it is secure enough to stop scanning session traffic.
• D. Choose a matching algorithm based on available memory and the type of inspection being performed.

Correct answer: C

Explanation

The correct answer, C, explains that adaptive scanning allows the IPS to evaluate when it can safely stop scanning traffic, enhancing performance without compromising security. Option A is incorrect because it refers to the number of engines rather than the scanning behavior. Option B misrepresents the function as it suggests downloading signatures rather than stopping scans. Option D focuses on algorithm selection, which is not related to adaptive scanning.