Which statement is correct in adding the FTP .Login.Failed signature to the IPS sensor profile?

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings.

Which statement is correct in adding the FTP .Login.Failed signature to the IPS sensor profile?
A . Traffic matching the signature will be silently dropped and logged.
B . The signature setting uses a custom rating threshold.
C . The signature setting includes a group of other signatures.
D . Traffic matching the signature will be allowed and logged.

View Answer

Answer: A

Explanation:

"pass" is only default action.

The Pass action on the specific signature would only be chosen, if the Action (on the top) was set to Default. But instead its set to Block, se the action is will be to block and drop.

Select Allow to allow traffic to continue to its destination. Select Monitor to allow traffic to continue to its destination and log the activity. Select Block to silently drop traffic matching any of the signatures included in the entry. Select Reset to generate a TCP RST packet whenever the signature is triggered. Select Default to use the default action of the signatures.

If you enable Packet logging, FortiGate saves a copy of the packet that matches the signature.