If traffic matches this IPS sensor, which two actions is the sensor expected to take?

Refer to the exhibit.

The exhibit shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

A. The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.

B. The sensor will block all attacks aimed at Windows servers.

C. The sensor will reset all connections that match these signatures.

D. The sensor will gather a packet log for all matched traffic.

Answer: A,B

Explanation:

The correct answers are:

A. The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.

B. The sensor will block all attacks aimed at Windows servers.

For option A, the sensor is configured to "Deny Attacker Inline" for the NTP.Spoofed.KoD.DoS signature, which means it will block traffic matching this signature.

For option B, the sensor is configured to "Deny Attacker Inline" for the Windows Servers category, which means it will block all attacks aimed at Windows servers.