Which statement concerning IPS is false?

A.
IPS packages contain an engine and signatures used by both IPS and other flow-based scans.

B.
One-arm topology with sniffer mode improves performance of IPS blocking.

C.
IPS can detect zero-day attacks.

D.
The status of the last service update attempt from FortiGuard IPS is shown on System>Config>FortiGuard and in output from ‘diag autoupdate version’