A.is an active, static security defense technology.

B.Unable to detect violation of security policy.

C.Can detect authorized and non-authorized intrusions.

D.Cannot find the trace of the system being attacked.

A.True

B.False

A.Mail filtering will only take effect when the mail filtering configuration file is invoked when the security policy is allowed.

B.When an IMAP message is detected, if it is judged to be an illegal email; the firewall's response action only supports sending alarm messages and will not block the email.

C.The attachment size limit is for a single attachment, not for the total size of all attachments.

D.When a POP3 message is detected, if it is judged to be an illegal email, the firewall's response action only supports sending alarm information, and will not block the email o

A.Scanning attacks include address scanning and port scanning.

B.The source address of the scanning attack is real, so you can use the method of directly adding a blacklist for defense.

C.It is usually the network detection behavior before the attacker launches a real attack.

D.When a worm breaks out, it is generally accompanied by an address scan attack, so scanning attacks are aggressive.

A.Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.

B.The signature set can contain either predefined signatures or custom signatures. 832335

C.When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.

D.The priority of the coverage signature is higher than that of the signature in the signature set.