In R77, Under what circumstances would IPS bypass be enforced?

Your Customer would like to enable IPS in his Corporate Cluster, but he is concerned about high
CPU usage because if the IPS inspection. What feature would you configure to disable
inspection if a high CPU usage develops?

Where do you run the command get_ips_statistics.sh from?

“Tuning” IPS protections to suit the specific needs of an environment can be accomplished by all
of the following EXCEPT:

OF the following, which is NOT a kernel parameter relating to the IPS “Bypass Under Load”
settings:

“If the machine is under stress, we do not want to leave the stress condition due to a single
measurement (which could be an anomaly), but rather wait for a given length of time, before
changing the condition.” …describes which of the following “Bypass under Load” setting kernel
parameters?

Jerry is a network administrator for ACME Co. Their network contains 5 gateways all managed
by a single Management Server. They are currently receiving an exorbitant amount of false
positive for traffic traversing their network. Based on this information, what factor do you think is
contributing most to the high amount of false positives Jerry is receiving?

You have created a number of profiles and activated the relevant protections. Afterwards, you
decide that the ‘Enterprise gateway’ should allow instant messaging. The current profile enabled
for Enterprise gateway blocks instant messaging. The profile for the Enterprise gateway is
currently being used on the Voyager gateway and the Bird of Prey gateway. What is the best
process for making this change on the Enterprise gateway only?

What steps can be taken if IPS is causing a High Performance Impact?

When the IPS ‘Bypass under Load’ mechanism detects that the certain CPU and memory usage
thresholds have been reached, which of the following occurs?