Refer to the exhibit. What statement is true about the interface S1/0 on router R1？（）

A.A network administrator entering a wrong password would generate a true-negative alarm.
B.A false positive alarm is generated when an IDS/IPS signature is correctly identified.
C.An IDS is significantly more advanced over IPS because of its ability to prevent network attacks.
D.Cisco IDS works inline and stops attacks before they enter the network.
E.Cisco IPS taps the network traffic and responds after an attack.
F.Profile-based intrusion detection is also known as "anomaly detection".

A.Access attacks can consist of password attacks，trust exploitation，port redirection，and man-in-the-middle attacks.
B.Access attacks can consist of password attacks，ping sweeps，port scans，and man-in-the-middle attacks.
C.Access attacks can consist of packet sniffers，ping sweeps，port scans，and man-in-the-middle attacks.
D.Reconnaissance attacks can consist of password attacks，trust exploitation，port redirection and Internet information queries.
E.Reconnaissance attacks can consist of packet sniffers，port scans，ping sweeps，and Internet information queries.
F.Reconnaissance attacks can consist of ping sweeps，port scans，man-in-middle attacks and Internet information queries.

A.It can be configured to block Java traffic.
B.It can be configured to detect and prevent SYN-flooding denial-of-service （DoS） network attacks.
C.It can only examine network layer and transport layer information.
D.It can only examine transport layer and application layer information.
E.The inspection rules can be used to set timeout values for specified protocols.
F.The ip inspect cbac-name command must be configured in global configuration mode.