Which statement is correct about the Cisco Secure Firewall Threat Defense IPS functionality?
- Can be deployed as as IDS or IPS.
- Can drop malicious packets when deployed in IDS mode.
- Can only be deployed inline.
- Can analyze traffic only at layer 3 and layer 4.
| Explanation & Hint:
The correct statement about the Cisco Secure Firewall Threat Defense IPS functionality is: Can be deployed as an IDS or IPS. Cisco’s Secure Firewall Threat Defense can be configured to run as an Intrusion Detection System (IDS) or as an Intrusion Prevention System (IPS). In IDS mode, it monitors network traffic and generates alerts on suspicious activities, while in IPS mode, it is deployed inline and can actively block or prevent those threats from carrying out potentially harmful activities. |