A. Can be used to Detect/Prevent intrusions at network or Zone perimeter
B. Distributed IDS/IPS must be configured to utilize Gateway IDS/IPS
C. Can be combined with Decryption policies
D. Distributed IDS/IPS and Gateway IDS/IPS have same set of signatures
A. Expanded Signature Set
B. TLS Inspection
C. Impact Score
D. Detection Mode
A. Eliminates the needs for additional security controls
B. Requires logical networking components from VMware Cloud Foundation
C. Scales linearly with the data center
D. Provides decentralized control
A. Firewall Table
B. IDPS Table
C. Rule Table
D. Flow Table
A. Sees every malware interaction, not just those with the OS
B. Full system-emulation cloud sandbox enables detection of evasive malware
C. Support both Windows and Linux VMs
D. All the traffic is hair-pinned to a centralized appliance for malware detection
A. NSX Manager rule count
B. System wide rule count
C. Per VM vNIC rule count
D. ESX host rule count
A. T1 Service Interfaces
B. T0 Downlinks
C. T1 Downlinks
D. T1 Uplinks
A. First Packet, Single, and Multiple
B. First Packet, Open, Established, Closing, Fin Wait, and Closed
C. Last Packet, and Static and Dynamic Errors
D. First Packet, and Error Reply
