What are two valid JIMS event log sources? (Choose two.)

Exhibit.

You want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer To complete this task, where should you configure the default gateway for the User-1 device?

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic.
Which two parameters are required to accomplish this task? (Choose two.)

What are two elements of a custom IDP/IPS attack object? (Choose two.)

Exhibit.

The output shown in the exhibit is displayed in which formal?