A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.
Which actions should you take?

Question

A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.

Which actions should you take?

Amirouche Rahani · Accepted Answer

• Update Distributed IDS/IPS signature database• Edit your profile from Security > Distributed IDS > Profiles• Select Critical severity, filter on attack type and select Successful Credential Theft Detected• Check the profile is applied in Distributed IDS rules

Amirouche Rahani · Answer

• Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules• Filter on attack type and select Successful Credential Theft Detected• Update Mode to detect and prevent• Click on gear icon and change direction to OUT

Amirouche Rahani · Answer

• Create a new profile from Security > Distributed IDS > Profiles• Select Critical severity, filter on attack type and select Successful Credential Theft Detected• Check the profile is applied In Distributed IDS rules• Monitor Distributed IDS alerts to validate changes are applied

Amirouche Rahani · Answer

• Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules• Filter on attack type and select Successful Credential Theft Detected• Update Mode to detect and prevent• Click on gear icon and change direction to IN-OUT

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 12 - 5V0-41.21 discussion

Suggested answer: A

0 comments