CheckPoint Exam 156-585 Topic 5 Question 51 Discussion

Actual exam question for CheckPoint's 156-585 exam

Question #: 51
Topic #: 5

[All 156-585 Questions]

What are some measures you can take to prevent IPS false positives?

AExclude problematic services from being protected by IPS (sip, H 323, etc )

BUse IPS only in Detect mode

CUse Recommended IPS profile

DCapture packets. Update the IPS database, and Back up custom IPS files

Show Suggested Answer

Suggested Answer: A

by Jamal at Jan 25, 2024, 04:52 AM

Limited Time Offer

25%

Off

Get Premium 156-585 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sunny

4 hours ago

Ooh, this is a tricky one! I'd go with C - the Recommended IPS profile. It's like the cheat sheet for keeping those false positives at bay.

upvoted 0 times

...

Blondell

10 days ago

Capturing packets and updating the IPS database can also help prevent false positives.

upvoted 0 times

...

Lynelle

12 days ago

I agree with Emerson. It helps in reducing false positives.

upvoted 0 times

...

Emerson

15 days ago

I think using Recommended IPS profile is a good measure.

upvoted 0 times

...

Lavonna

20 days ago

Capturing packets, updating the IPS database, and backing up custom IPS files are also important measures to prevent false positives.

upvoted 0 times

...

Nathalie

23 days ago

I agree with Jesusita. Using IPS only in Detect mode can also help prevent false positives.

upvoted 0 times

...

Jesusita

26 days ago

I think we should exclude problematic services from being protected by IPS.

upvoted 0 times

...