When enabling IPS on an ISR using the Cisco SDM IPS Wizard, in what location can the SDF be placed?()A、On the RAM of the ISRB、On the USB memory stick of the ISRC、On the NVRAM of the ISRD、On the IPS Module of the ISRE、On the Flash memory of the ISR

题目

When enabling IPS on an ISR using the Cisco SDM IPS Wizard, in what location can the SDF be placed?()

  • A、On the RAM of the ISR
  • B、On the USB memory stick of the ISR
  • C、On the NVRAM of the ISR
  • D、On the IPS Module of the ISR
  • E、On the Flash memory of the ISR

相似考题
参考答案和解析
正确答案:E
更多“When enabling IPS”相关问题
  • 第1题:

    Which of the following would be the correct location to access when enabling Driver Signature Verification?()

    • A、On the hardware tab in System Properties.
    • B、In the Security Center applet in Control Panel.
    • C、In Device Manager under the File menu and options.
    • D、In Computer Management.

    正确答案:A

  • 第2题:

    下列关于IPS的说法中,错误的是()。

    • A、IPS一般以在线方式部署在网络关键路径
    • B、IPS是一种基于应用层检测的设备
    • C、IPS区别于IDS的重要一点是IPS可以主动防御攻击
    • D、IPS天然可以防范所有大的攻击,不需要升级特征库

    正确答案:D

  • 第3题:

    IPS与IDC的主要区别是()

    • A、IPS可以检测网络攻击,但是不能发出警告
    • B、IPS可以检测网络攻击并发布警告
    • C、IPS可以通过阻止流量并重新连接来回应网络攻击
    • D、IPS是在线的并可以监控流量

    正确答案:C

  • 第4题:

    Which statement about an IPS is true?()

    • A、The IPS is in the traffic path.
    • B、Only one active interface is required.
    • C、Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.
    • D、When malicious traffic is detected,the IPS will only send an alert to a management station.

    正确答案:A

  • 第5题:

    Which two statements describe the functions and operations of IDS and IPS systems?()

    • A、A network administrator entering a wrong password would generate a true-negative alarm.
    • B、A false positive alarm is generated when an IDS/IPS signature is correctly identified.
    • C、An IDS is significantly more advanced over IPS because of its ability to prevent network attacks.
    • D、Cisco IDS works inline and stops attacks before they enter the network.
    • E、Cisco IPS taps the network traffic and responds after an attack.
    • F、Profile-based intrusion detection is also known as "anomaly detection".

    正确答案:B,F

  • 第6题:

    What are two interfaces created when enabling a chassis cluster?()

    • A、st0
    • B、fxp1
    • C、fab0
    • D、reth0

    正确答案:B,C

  • 第7题:

    IPS技术包括基于()的IPS和基于网络的IPS两大类。


    正确答案:主机

  • 第8题:

    单选题
    Which statement is true when you enable SSL for the WebUI?()
    A

    SSL is enabled for the WebUI by default.

    B

    You must address the WebUI using HTTPS://.

    C

    You must change the WebUI port when enabling SSL.

    D

    The demokey and democert are applied to the WebUI by default.


    正确答案: D
    解析: 暂无解析

  • 第9题:

    多选题
    What are two interfaces created when enabling a chassis cluster?()
    A

    st0

    B

    fxp1

    C

    fab0

    D

    reth0


    正确答案: C,B
    解析: 暂无解析

  • 第10题:

    单选题
    What does Cisco recommend when you are enabling Cisco IOS IPS?()
    A

    Do not enable all the signatures at the same time.

    B

    Do not enable the ICMP signature.

    C

    Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.

    D

    Disable CEF because it is not compatible with Cisco IOS IPS. .


    正确答案: B
    解析: 暂无解析

  • 第11题:

    填空题
    IPS技术包括基于()的IPS和基于网络的IPS两大类。

    正确答案: 主机
    解析: 暂无解析

  • 第12题:

    多选题
    IDS和IPS技术使用()部署方式
    A

    基于防火墙的IPS部署

    B

    基于软件的IPS部署

    C

    基于网络的IPS部署

    D

    基于主机的IPS部署


    正确答案: B,D
    解析: 暂无解析

  • 第13题:

    Which two statements are true regarding trace options on Junos devices?()

    • A、You can see the contents of the log file by entering the show log <filename> command
    • B、Trace options will send information to your screen automatically
    • C、Trace options are limited to one protocol at a time
    • D、The file name and set of flags may be specified when enabling trace options

    正确答案:A,D

  • 第14题:

    有关IPS部署方式,描述正确的是()

    • A、IPS只能旁路部署
    • B、IPS既可在线部署又可旁路部署
    • C、IPS可以在线路由方式部署
    • D、IPS只能在线透明部署

    正确答案:B

  • 第15题:

    IDS和IPS技术使用()部署方式

    • A、基于防火墙的IPS部署
    • B、基于软件的IPS部署
    • C、基于网络的IPS部署
    • D、基于主机的IPS部署

    正确答案:C,D

  • 第16题:

    Which of these is mandatory when configuring Cisco IOS Firewall? ()

    • A、Cisco IOS IPS enabled on the untrusted interface
    • B、NBAR enabled to perform protocol discovery and deep packet inspection
    • C、a route map to define the trusted outgoing traffic
    • D、a route map to define the application inspection rules
    • E、an inbound extended ACL applied to the untrusted interface

    正确答案:E

  • 第17题:

    Refer to the exhibit. What is the configuration an example of?()

    • A、enabling modular QoS over Frame Relay
    • B、enabling Real-Time Transport Protocol (RTP) header compression
    • C、enabling distributed compressed Transmission Control Protocol
    • D、enabling latency and jitter reduction for Transmission Control traffic
    • E、enabling TCP header compression

    正确答案:E

  • 第18题:

    Which statement is true when you enable SSL for the WebUI?()

    • A、SSL is enabled for the WebUI by default.
    • B、You must address the WebUI using HTTPS://.
    • C、You must change the WebUI port when enabling SSL.
    • D、The demokey and democert are applied to the WebUI by default.

    正确答案:B

  • 第19题:

    单选题
    When enabling IPS on an ISR using the Cisco SDM IPS Wizard, in what location can the SDF be placed?()
    A

    On the RAM of the ISR

    B

    On the USB memory stick of the ISR

    C

    On the NVRAM of the ISR

    D

    On the IPS Module of the ISR

    E

    On the Flash memory of the ISR


    正确答案: A
    解析: 暂无解析

  • 第20题:

    单选题
    Which of the following would be the correct location to access when enabling Driver Signature Verification?()
    A

    On the hardware tab in System Properties.

    B

    In the Security Center applet in Control Panel.

    C

    In Device Manager under the File menu and options.

    D

    In Computer Management.


    正确答案: B
    解析: 暂无解析

  • 第21题:

    单选题
    Examine the following options ,when editing global IPS settings, which one determines if the IOS- basedIPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for thatengine is being compiled?()
    A

    Enable Signature Default

    B

    Enable Engine Fail Closed

    C

    Enable Default IOS Signature ActualTests.com

    D

    Enable Fail Opened


    正确答案: C
    解析: 暂无解析

  • 第22题:

    多选题
    Which of the following is true about the Cisco IOS-IPS functionality? ()
    A

    The signatures available are built into the IOS code.

    B

    Toupdate signatures youneed to install a new IOS image

    C

    To activate new signatures you download a new Signature DefiitionFile (SDF) from Cisco’s web site

    D

    Loading and enabling selected IPS signatures is user configurable

    E

    Cisco IOS onlyprovides Intrusion Detection functionality

    F

    Cisco IOS-IPS requires a network module installed in your router running sensor software


    正确答案: C,D
    解析: 暂无解析

  • 第23题:

    多选题
    What are three necessary steps for enabling 802.1X access when configuring Layer 2 enforcement?()
    A

    Configure a location group

    B

    Createan authentication protocol set

    C

    Configure the RADIUS AV pair list

    D

    Configure RADIUS clients

    E

    Configure role and role-mapping rules


    正确答案: A,E
    解析: 暂无解析