Click the Exhibit button. You have just committed the new IDP policy shown in the exhibit.
However, you notice no action is taken on traffic matching the R4 IDP rule. Which two
actions will resolve the problem? (Choose two.)
A.
Change the IPS rulebase to an exempt rulebase.
B.
Delete the terminal statement from the R3 rule.
C.
Change the R4 rule to match on a predefined attack group.
D.
Insert the R4 rule above the R3 rule.
I think B and D are correct
0
0
Yes, it should be B and D.
https://www.juniper.net/documentation/en_US/junos12.1/topics/concept/idp-terminal-rule-understanding.html
0
0
A terminal rule is an exception to this algorithm. When a match is discovered in a terminal rule for the source, destination, zones, and application, IDP does not continue to check subsequent rules for the same source, destination, and application. It does not matter whether or not the traffic matches the attack objects in the matching rule.
0
0
B and D are the correct answers.
0
0