In which way are packets handled when the IPS internal zone is set to “disabled”?
A.
All packets are dropped to the external zone.
B.
All packets are dropped to the internal zone.
C.
All packets are ignored in the internal zone.
D.
All packets are sent to the default external zone.
Understanding the Internal Zone
The internal zone should represent your internal network. It should receive all the traffic that comes to your IP address range. If the zone is disabled, packets to this zone are ignored. By default the zone is enabled.
You then add the IP addresses that belong to this zone. If you do not configure IP addresses for all zones, all packets are sent to the default zone, the external zone.
You can enable or disable TCP, UDP, and other protocols for the internal zone. You can configure a destination port for the TCP and UDP protocols and a protocol number for the other protocols. You can either use the default thresholds or override the scanner settings and add your own thresholds and histograms.
http://www.cisco.com/c/en/us/td/docs/security/ips/6-1/configuration/guide/cli/cliguide/cli_anomaly_detection.html#wp1042784
Answer should be C
0
0