Which of the following is true about the Cisco IOS-IPS functionality? ()A、 The signatures available are built into the IOS code.B、 Toupdate signatures youneed to install a new IOS imageC、 To activate new signatures you download a new Signature DefiitionFi

题目

Which of the following is true about the Cisco IOS-IPS functionality? ()

  • A、 The signatures available are built into the IOS code.
  • B、 Toupdate signatures youneed to install a new IOS image
  • C、 To activate new signatures you download a new Signature DefiitionFile (SDF) from Cisco’s web site
  • D、 Loading and enabling selected IPS signatures is user configurable
  • E、 Cisco IOS onlyprovides Intrusion Detection functionality
  • F、 Cisco IOS-IPS requires a network module installed in your router running sensor software

相似考题
更多“Which of the following is true about the Cisco IOS-IPS functionality? ()A、 The signatures available are built into the IOS code.B、 Toupdate signatures youneed to install a new IOS imageC、 To activate new signatures you download a new Signature DefiitionFi”相关问题
  • 第1题:

    In which of the following phases can you ensure that the new Cisco Unified Communications solution is integrated without disrupting the existing network()

    • A、Operate
    • B、Plan
    • C、Deploy
    • D、Implement

    正确答案:B

  • 第2题:

    You need to upgrade the IOS of an existing router on your network. The new IOS image is located on a TFTP server that you have set up within the network. What command should you issue in order to download the new IOS version?()

    • A、Router# copy tftp flash
    • B、Router# copy flash run
    • C、Router(config)# restore flash
    • D、Router(config)# repair flash
    • E、Router#copy flash tftp
    • F、Router# copy start flash

    正确答案:A

  • 第3题:

    Which item is correct regarding Cisco IOS IPS on Cisco IOS Release 12.4(11)T and later ?()

    • A、requires the Basic or Advanced Signature Definition File
    • B、uses the built-in signatures that come with the Cisco IOS image as backup
    • C、supports SDEE,SYSLOG,and SNMP for sending Cisco IPS alerts
    • D、uses Cisco IPS 5.x signature format

    正确答案:D

  • 第4题:

    What is the main reason for using the "ip ips deny-action ips-interface" IOS command?()

    • A、 To selectively apply drop actions to specific interfaces
    • B、 To enable IOS to droptraffic for signatures configured with the Drop action
    • C、 To support load-balancing configurations in which traffic can arrive via multipleinterfaces 
    • D、 This is nota valid IOS command

    正确答案:C

  • 第5题:

    You have just purchased a new Cisco 3560 switch running the enhanced IOS and need configure  it to be installed in a high availability network. On a 3560 EMI switch,  which three types of  interfaces can be used to configure HSRP?()

    • A、 SVI interface
    • B、 Access port
    • C、 EtherChannel port channel
    • D、 Loopback interface
    • E、 Routed port
    • F、 BVI interface

    正确答案:A,C,E

  • 第6题:

    You are using NBAR to get a statistical baseline for the applications running on your network butdiscover that some applications are not being recognized. Which of the following are possiblesolutions?(Choose all that apply.)()

    • A、Use the ip nbar pdlm command to allow NBAR to reference a new PDLM in flash memory
    • B、If NBAR doesn’t recognize certain applications you must contact Cisco and ask them to emailyou a new PDLM for that application
    • C、Use the ip nbar port-map command to allow NBAR to recognize certain applications with anev/port number
    • D、The applications not being recognized can be rerouted to an NBAR collector, which has a morecomplete list of applications
    • E、Use the copy nbar flash: command to download a new PDLM file to flash
    • F、Use the ip nbar pdlm command to download a new NBAR reference file from the Cisco website

    正确答案:A,C

  • 第7题:

    An application is upgraded and it has been determined that the AccessAgent no longer properly responds to the application. It is understood that for a certain amount of time both the current version and the upgraded version of the application will be used by the end-users. The executables for both versions are the same. What should be the next step?()

    • A、Open AccessStudio and change the existing AccessProfile to use only the new signatures for Windows, control IDs, or HTML elements.
    • B、Open AccessStudio and create a new AccessProfile for the upgraded version and overwrite the existing AccessProfile on the IMS Server.
    • C、Open AccessStudio and edit the existing AccessProfile by using new triggers/actions associated with the new signatures for Windows, control IDs, or HTML elements.
    • D、Open AccessStudio and create a new AccessProfile for the upgraded version and upload it to the IMS Server so that two separate AccessProfiles may be used by the AccessAgent.

    正确答案:C

  • 第8题:

    You need to ensure the Client dimension is able to support new orders and new client records. Which setting should you configure?()

    • A、ROLAP storage
    • B、Lazy aggregations
    • C、Write Enabled property
    • D、Unknown Member functionality

    正确答案:A

  • 第9题:

    多选题
    Before installing a new, upgraded version of the IOS, what should be checked on the router, and which command should be used to gather this information? ()
    A

    the amount of available ROM

    B

    the amount of available flash and RAM memory

    C

    the version of the bootstrap software present on the router

    D

    show version

    E

    show processes

    F

    show running-config


    正确答案: A,B
    解析: 暂无解析

  • 第10题:

    多选题
    Which three categories of signatures can a Cisco IPS microengine identify?()
    A

    DDoS signatures

    B

    strong signatures

    C

    exploit signatures

    D

    numeric signatures

    E

    spoofing signatures

    F

    connection signatures


    正确答案: A,B
    解析: 暂无解析

  • 第11题:

    多选题
    Which of the following is true about the Cisco IOS-IPS functionality? ()
    A

    The signatures available are built into the IOS code.

    B

    Toupdate signatures youneed to install a new IOS image

    C

    To activate new signatures you download a new Signature DefiitionFile (SDF) from Cisco’s web site

    D

    Loading and enabling selected IPS signatures is user configurable

    E

    Cisco IOS onlyprovides Intrusion Detection functionality

    F

    Cisco IOS-IPS requires a network module installed in your router running sensor software


    正确答案: F,C
    解析: 暂无解析

  • 第12题:

    单选题
    You need to upgrade the IOS of an existing router on your network. The new IOS image is located on a TFTP server that you have set up within the network. What command should you issue in order to download the new IOS version?()
    A

    Router# copy tftp flash

    B

    Router# copy flash run

    C

    Router(config)# restore flash

    D

    Router(config)# repair flash

    E

    Router#copy flash tftp

    F

    Router# copy start flash


    正确答案: C
    解析: 暂无解析

  • 第13题:

    Examine the following options ,when editing global IPS settings, which one determines if the IOS- basedIPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for thatengine is being compiled?()

    • A、Enable Signature Default
    • B、Enable Engine Fail Closed
    • C、Enable Default IOS Signature ActualTests.com
    • D、Enable Fail Opened

    正确答案:B

  • 第14题:

    What does Cisco recommend when you are enabling Cisco IOS IPS?()

    • A、Do not enable all the signatures at the same time.
    • B、Do not enable the ICMP signature.
    • C、Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.
    • D、Disable CEF because it is not compatible with Cisco IOS IPS. .

    正确答案:A

  • 第15题:

    Which three categories of signatures can a Cisco IPS microengine identify?()

    • A、DDoS signatures
    • B、strong signatures
    • C、exploit signatures
    • D、numeric signatures
    • E、spoofing signatures
    • F、connection signatures

    正确答案:A,C,F

  • 第16题:

    What are two requirements to perform a warm Cisco IOS upgrade on a Cisco ISR router? ()(Choose two.)

    • A、at least one enabled Ethernet interface
    • B、Cisco IOS version 12.3(2)T or greater
    • C、enough memory to decompress the new Cisco IOS image
    • D、internal flash memory equaling two times the space required for the current Cisco IOS image

    正确答案:B,C

  • 第17题:

    Before installing a new, upgraded version of the IOS, what should be checked on the router, and which command should be used to gather this information?()

    • A、the amount of available ROM
    • B、the amount of available flash and RAM memory
    • C、the version of the bootstrap software present on the router
    • D、show version
    • E、show processes
    • F、show running-config

    正确答案:B,D

  • 第18题:

    What is a new feature of the Cisco ISR router? ()

    • A、advanced integration module
    • B、FICON ports
    • C、Cisco CallManager 5.0 support
    • D、warm Cisco IOS upgrade feature

    正确答案:D

  • 第19题:

    You create a new ASP.NET MVC 2 Web application. The following default routes are created in the Global.asax.vb file.01 Shared Sub RegisterRoutes(ByVal routes As RouteCollection)02  03 routes.IgnoreRoute("{resource}.axd/{*pathInfo}")04  05 routes.MapRoute( "Default", "{controller}/{action}/{id}", New With {.controller = "Home", .action = "Index", .id = ""})  06 End Sub  You implement a controller named HomeController that includes methods with the following signatures.Function Index() As ActionResult  Function Details(ByVal id As Integer) As ActionResultFunction DetailsByUsername(   ByVal username As String) As ActionResult  You need to add a route to meet the following requirements.   The details for a user must be displayed when a user name is entered as the path by invoking the DetailsByUsername action.  User names can contain alphanumeric characters and underscores, and can be between 3 and 20 characters long.What should you do?()

    • A、Replace line 05 with the following code segment. routes.MapRoute( "Default", "{controller}/{action}/{id}", New With {.controller = "Home", .action = "DetailsByUsername", .id = ""})
    • B、Replace line 05 with the following code segment. routes.MapRoute("Default", "{controller}/{action}/{username}", New With {.controller = "Home", .action = "DetailsByUsername", .username = ""}, New With {.username = "/w{3,20}"} )
    • C、At line 04, add the following code segment.routes.MapRoute( "Details byUsername""{username}", New With {.controller = "Home", .action = "DetailsByUsername"}, New With {.username = "/w{3,20}"})
    • D、At line 04, add the following code segment. routes.MapRoute( "Details by Username", "{id}",  New With {.controller = "Home", .action = "DetailsByUsername"}, New With {.id = "/w{3,20}"} )

    正确答案:C

  • 第20题:

    单选题
    What is a new feature of the Cisco ISR router? ()
    A

    advanced integration module

    B

    FICON ports

    C

    Cisco CallManager 5.0 support

    D

    warm Cisco IOS upgrade feature


    正确答案: B
    解析: 暂无解析

  • 第21题:

    单选题
    What is the main reason for using the "ip ips deny-action ips-interface" IOS command?()
    A

     To selectively apply drop actions to specific interfaces

    B

     To enable IOS to droptraffic for signatures configured with the Drop action

    C

     To support load-balancing configurations in which traffic can arrive via multipleinterfaces 

    D

     This is nota valid IOS command


    正确答案: D
    解析: 暂无解析

  • 第22题:

    多选题
    You have just purchased a new Cisco 3560 switch running the enhanced IOS and need configure  it to be installed in a high availability network. On a 3560 EMI switch,  which three types of  interfaces can be used to configure HSRP?()
    A

    SVI interface

    B

    Access port

    C

    EtherChannel port channel

    D

    Loopback interface

    E

    Routed port

    F

    BVI interface


    正确答案: B,F
    解析: 暂无解析

  • 第23题:

    多选题
    What are two requirements to perform a warm Cisco IOS upgrade on a Cisco ISR router? ()(Choose two.)
    A

    at least one enabled Ethernet interface

    B

    Cisco IOS version 12.3(2)T or greater

    C

    enough memory to decompress the new Cisco IOS image

    D

    internal flash memory equaling two times the space required for the current Cisco IOS image


    正确答案: C,A
    解析: 暂无解析