| Exam 210-260 | Question id=644 | IPS |
Which Sourcefire event action should you choose if you want to block only malicious traffic from a particular end user?
| A. |
Allow with inspection | |
| B. |
Allow without inspection | |
| C. |
Block | |
| D. |
Trus | |
| E. |
Monitor |