A.The security profile may not be applied to the security policy that the action is allowed and take effect.

B.The security profile must be applied to the security policy that is allowed to take effect.

C.If the action of the security policy is "prohibited", the device will discard this traffic, and then no content security check will be performed.

D.If the security policy action is "Allow", the traffic will not match the security profile.

A.Providing security evaluation services for government departments, enterprises and institutions

B.Early warning rotification of security incidents

C.Emergency handling of security incidents

D.Cooperate with other agencies to provide training services

A.Intrusion detection system includes all hardware and software systems for intrusion detection

B.The intrusion detection system can dynamically collect a large amount of key information 3nd materials through the network and computer, and can timely analyze and judge the current state of the entire system environment.

C.The flood detection system can be linked with firewalls and switches to become a powerfu 'helper' of the firewall, which is better and more precise to control traffic access between domains.

D.The intrusion detection system can perform blocking operation if it finds that there is a violation of the security policy or the system has traces of being attacked.

A.False

B.True

A.The administrator can learn the security policy of the traffic hit through the policy hit log. And use it for fault location when the problem occurs.

B.The administrator can advertise the content log to view the detection and defense records of network threats.

C.The administrator can use the threat logto understand the user's security risk behavior and the reason for being alarmed or blocked.

D.The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.