Q: 13
An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity.
When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its
destination?
Options
Discussion
Anyone checked the official Cisco guide or labbed this with inline sets? Curious if A matches the hands-on.
C vs A-I'm pretty sure it's A for inline mode, since the IPS just retransmits from the inline set after inspection. C is tempting but only applies if it's in routed mode, which isn't mentioned here. Seen similar on practice, so leaning towards A but open to corrections if I'm missing something niche.
C vs D? If the IPS is bridging, wouldn't C fit if it's acting as a routed hop?
Guessing A. Inline mode typically retransmits the traffic from the IPS inline set, not out a separate interface.
C or D? I thought with inline mode, traffic would exit via the outside interface (C). Option A seems more for dedicated inline sets but not always default. Might be missing something small here.
Clear wording on this one, similar to some practice sets I've seen. A
Be respectful. No spam.
