Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit. If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage, what is the correct conclusion?
A.
The IPS engine is unable to prevent an intrusion attack.
B.
The IPS engine is inspecting a high volume of traffic.
C.
The IPS engine will continue to run in a normal state.
B is correct. IPS engine remains active, but doesn't inspect traffic. If the CPU use decreases after that, it usually indicates that the volume of traffic being inspected is too high for that FortiGate model.
B. The IPS engine is inspecting a high volume of traffic.
Reference and download study guide:
https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html
B is correct:
fortinet-fortigate-security-study-guide-for-fortios-72 page 417
If there are high-CPU use problems caused by the IPS, you can use the diagnose test application
ipsmonitor command with option 5 to isolate where the problem might be. Option 5 enables IPS bypass
mode. In this mode, the IPS engine is still running, but it is not inspecting traffic. If the CPU use decreases
after that, it usually indicates that the volume of traffic being inspected is too high for that FortiGate model.
IMHO, A is correct:
Option 5 enables IPS bypass mode. In this mode, the IPS is still running, but it is not inspecting traffic. If the CPU use decreases after that, it usually indicates that the volume of traffic being inspected is too high for that particular FortiGate model. If the
CPU use remains high after enabling IPS bypass mode, it usually indicates a problem in the IPS engine that you must report to Fortinet's support.
Enterprise_Firewall_7.0_Study_Guide-Online pg 405
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
BoostBoris
Highly Voted 2 years, 2 months agoSlash_JM
Most Recent 1 year, 7 months agoraydel92
1 year, 8 months agoDani_Prime
1 year, 8 months ago[Removed]
1 year, 8 months agoD1360_1304
1 year, 9 months agoDeep_Purple
1 year, 9 months agoEggrolls
1 year, 10 months ago