Which of the following is not detected action when detecting a virus in a message?

The main attack defense technologies of Huawei USG6000 include source detection, fingerprint learning and correlation defense.

The administrator configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not possible?

IPS function of Huawei USG6000 product supports two response modes of blocking and alarming.

In the security protection system of cloud era, reforms must be carried out in advance, in the event, and afterwards, and continuous improvement and development of closed loops must be formed.
Which of the following key points should be fulfilled in "in the matter"? (Multiple choices)