Which type of log is displayed?

Refer to the exhibit.

Which type of log is displayed?
A . IDS
B . proxy
C . NetFlow
D . sys

View Answer

Answer: A

Explanation:

You also see the 5-tuple in IPS events, NetFlow records, and other event data. In fact, on the exam you may need to differentiate between a firewall log versus a traditional IPS or IDS event. One of the things to remember is that traditional IDS and IPS use signatures, so an easy way to differentiate is by looking for a signature ID (SigID). If you see a signature ID, then most definitely the event is a traditional IPS or IDS event.