A.A network administrator entering a wrong password would generate a true-negative alarm.
B.A false positive alarm is generated when an IDS/IPS signature is correctly identified.
C.An IDS is significantly more advanced over IPS because of its ability to prevent network attacks.
D.Cisco IDS works inline and stops attacks before they enter the network.
E.Cisco IPS taps the network traffic and responds after an attack.
F.Profile-based intrusion detection is also known as "anomaly detection".

A.Access attacks can consist of password attacks，trust exploitation，port redirection，and man-in-the-middle attacks.
B.Access attacks can consist of password attacks，ping sweeps，port scans，and man-in-the-middle attacks.
C.Access attacks can consist of packet sniffers，ping sweeps，port scans，and man-in-the-middle attacks.
D.Reconnaissance attacks can consist of password attacks，trust exploitation，port redirection and Internet information queries.
E.Reconnaissance attacks can consist of packet sniffers，port scans，ping sweeps，and Internet information queries.
F.Reconnaissance attacks can consist of ping sweeps，port scans，man-in-middle attacks and Internet information queries.