Click the Exhibit button. Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?
A.
The security policy dmz-pol1 has an action of permit.
B.
The IDP policy idp-pol1 is not configured as active.
C.
The IDP rule r2 has an ip-action value of notify.
D.
The IDP rule r1 has an action of ignore-connection.
I think answer D make more sense for this question
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
neoncek
4 years, 7 months agoMaw
5 years, 10 months ago