Click the Exhibit button.

An attacker is using a nonstandard port for HTTP for reconnaissance into your network. Referring to the exhibit,
which two statements are true? (Choose two.)

A.
The IPS engine will not detect the application due to the nonstandard port.

B.
The IPS engine will detect the application regardless of the nonstandard port.

C.
The IPS engine will perform application identification until the session is established.

D.
The IPS engine will perform application identification until it processes the first 256 bytes of the packet.

Explanation:
https://www.juniper.net/techpubs/en_US/idp/topics/example/simple/intrusion-detection- preventionidp-rulebase-default-service-usage.html