With which three tasks does the IPS Policies Wizard help you？ （）A、Selecting the interface to which the IPS rule will be appliedB、Selecting the Signature Definition File （SDF） that the router will useC、Selecting the direction of traffic that will be inspec

题目

With which three tasks does the IPS Policies Wizard help you？ （）

  • A、Selecting the interface to which the IPS rule will be applied
  • B、Selecting the Signature Definition File （SDF） that the router will use
  • C、Selecting the direction of traffic that will be inspected
  • D、Selecting the inspection policy that will be applied to the interface
相似考题

1.Rize developed his philosophy in service，the essence of which is____.A. The Gold StandardsB. To try to be "the hotelier of kings and the king of hoteliers"C. The Three Steps of ServiceD. The way of selecting and training employees

2.What is the first step that you would use Cisco Product Advisor for when selecting a router for an Edge solution?()A. determine types of protocols to be supportedB. determine the environment in which the router will be usedC. select the number of WAN ports requiredD. select the number of LAN ports required

3.You are the network consultant from Cisco.com. Please point out two statements correctly describe an IPS device()A. It resembles a Layer 2 bridge.B. Traffic flow through the IPS resembles traffic flow through a Layer 3 router.C. Inline interfaces which have no IP addresses cannot be detected.D. Malicious packets that have been detected are allowed to pass through, but all subsequent traffic is blocked.

4.Which statement about IDS／IPS design is correct?()A. An IPS should be deployed if the security policy does not support the denial of traffic.B. An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C. An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.D. Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.

更多“With which three tasks does the IPS Policies Wizard help you？ （）A、Selecting the interface to which the IPS rule will be appliedB、Selecting the Signature Definition File （SDF） that the router will useC、Selecting the direction of traffic that will be inspec”相关问题

  • 第1题：

    Which two of these are characteristics of an IPS device?()

    A. passively listens to network traffic

    B. is an active device in the traffic path

    C. has a permissive interface that is used to monitor networks

    D. traffic arrives on one IPS interface and exits on another


    参考答案：B, D

  • 第2题：

    Examine the following options ，when editing global IPS settings， which one determines if the IOS- basedIPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for thatengine is being compiled？（）

    • A、Enable Signature Default
    • B、Enable Engine Fail Closed
    • C、Enable Default IOS Signature ActualTests.com
    • D、Enable Fail Opened

    正确答案:B

  • 第3题：

    What is the first step that you would use Cisco Product Advisor for when selecting a router for an Edge solution？（）

    • A、 determine types of protocols to be supported
    • B、 determine the environment in which the router will be used
    • C、 select the number of WAN ports required
    • D、 select the number of LAN ports required

    正确答案:B

  • 第4题：

    When using the Cisco SDM Quick Setup Siteto-Site VPN wizard， which three parameters do you configure？（）

    • A、Source interface where encrypted traffic originates
    • B、IP address for the remote peer
    • C、Transform set for the IPsec tunnel
    • D、Interface for the VPN connection

    正确答案:A,B,D

  • 第5题：

    In the admin GUI, you navigate to "System" > "Status" > "Active Users". You see several buttons, including "Delete Session", "Delete All Sessions". "Refresh Roles", and "Disable All Users".Which two statements are true?（）

    • A、To forcibly sign out a single user, you should select the check box next to that user's login name, then select "Delete Session".
    • B、If you select "Delete All Sessions", all users are forcibly signed out and are unable to sign in again until "Enable All Users" is selected.
    • C、Selecting "Disable All Users" prevents users from signing in and starting a new session, but does not forcibly sign out any users that already have an existing session.
    • D、Selecting "Refresh Roles" re-evaluates authentication policies, role-mapping rules, and resource policies for all existing user sessions.

    正确答案:A,D

  • 第6题：

    Network A has a spanning-tree problem in which the traffic is selecting a longer path. How is the path cost calculated？（）

    • A、number of hops
    • B、priority of the bridge
    • C、interface bandwidth
    • D、interface delay
    • E、None of the above

    正确答案:C

  • 第7题：

    Which statement about an IPS is true？（）

    • A、The IPS is in the traffic path.
    • B、Only one active interface is required.
    • C、Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.
    • D、When malicious traffic is detected，the IPS will only send an alert to a management station.

    正确答案:A

  • 第8题：

    单选题
    A jar contains 54 marbles each of which is blue, green, or white. The probability of selecting a blue marble at random from the jar is 1/3, and the probability of selecting a green marble at random is 4/9. How many white marbles does the jar contain?
    A

    6

    B

    8

    C

    9

    D

    12

    E

    18


    正确答案： A
    解析：
    Since the probability of selecting a blue marble at random from the jar is 1/3 and the probability of selecting a green marble at random from the jar is 4, the probability of selecting a white marble is 1-(1/3 + 4/9) = 1- (7/9) = 2/9. If x marbles of the 54 marbles in the jar are white, then x/54 = 2/9, 9x = 108, x = 108/9 = 12.

  • 第9题：

    单选题
    Network A has a spanning-tree problem in which the traffic is selecting a longer path. How is the path cost calculated？（）
    A

    number of hops

    B

    priority of the bridge

    C

    interface bandwidth

    D

    interface delay

    E

    None of the above


    正确答案： A
    解析： 暂无解析

  • 第10题：

    多选题
    Which two of these are characteristics of an IPS device？（）
    A

    passively listens to network traffic

    B

    is an active device in the traffic path

    C

    has a permissive interface that is used to monitor networks

    D

    traffic arrives on one IPS interface and exits on another


    正确答案： D,C
    解析： 暂无解析

  • 第11题：

    多选题
    With which three tasks does the IPS Policies Wizard help you？ （）
    A

    Selecting the interface to which the IPS rule will be applied

    B

    Selecting the Signature Definition File （SDF） that the router will use

    C

    Selecting the direction of traffic that will be inspected

    D

    Selecting the inspection policy that will be applied to the interface


    正确答案： B,C
    解析： 暂无解析

  • 第12题：

    单选题
    What is the first step that you would use Cisco Product Advisor for when selecting a router for an Edge solution？（）
    A

     determine types of protocols to be supported

    B

     determine the environment in which the router will be used

    C

     select the number of WAN ports required

    D

     select the number of LAN ports required


    正确答案： D
    解析： 暂无解析

  • 第13题：

    Which two of these are characteristics of an IPS device？（）

    • A、 passively listens to network traffic
    • B、 is an active device in the traffic path
    • C、 has a permissive interface that is used to monitor networks
    • D、 traffic arrives on one IPS interface and exits on another

    正确答案:B,D

  • 第14题：

    Which of the following is true about the Cisco IOS-IPS functionality？ （）

    • A、 The signatures available are built into the IOS code.
    • B、 Toupdate signatures youneed to install a new IOS image
    • C、 To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
    • D、 Loading and enabling selected IPS signatures is user configurable
    • E、 Cisco IOS onlyprovides Intrusion Detection functionality
    • F、 Cisco IOS-IPS requires a network module installed in your router running sensor software

    正确答案:C,D

  • 第15题：

    Which item is correct regarding Cisco IOS IPS on Cisco IOS Release 12.4（11）T and later ？（）

    • A、requires the Basic or Advanced Signature Definition File
    • B、uses the built-in signatures that come with the Cisco IOS image as backup
    • C、supports SDEE，SYSLOG，and SNMP for sending Cisco IPS alerts
    • D、uses Cisco IPS 5.x signature format

    正确答案:D

  • 第16题：

    Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances？（）

    • A、signature-based
    • B、profile-based
    • C、rule-based
    • D、protocol analysis-based

    正确答案:A

  • 第17题：

    Which three statements about IOS Firewall configurations are true？（）

    • A、The IP inspection rule can be applied in the inbound direction on the secured interface.
    • B、The IP inspection rule can be applied in the outbound direction on the unsecured interface.
    • C、The ACL applied in the outbound direction on the unsecured interface should be an extended ACL.
    • D、The ACL applied in the inbound direction on the unsecured interface should be an extended ACL.
    • E、For temporary openings to be created dynamically by Cisco IOS Firewall，the access-list for thereturning traffic must be a standard ACL.
    • F、For temporary openings to be created dynamically by Cisco IOS Firewall，the IP inspection rule must be applied to the secured interface.

    正确答案:A,B,D

  • 第18题：

    Which three statements accurately describe IOS Firewall configurations？（）

    • A、The IP inspection rule can be applied in the inbound direction on the secured interface
    • B、The IP inspection rule can be applied in the outbound direction on the unsecured interface
    • C、The ACL applied in the inbound direction on the unsecured interface should be an extendedACL.
    • D、For temporary openings to be created dynamically by Cisco IOS Firewall， the access-list for thereturning traffic must be a standard ACL

    正确答案:A,B,C

  • 第19题：

    You need to enhance performance of foreground and background applications. How can you configure Windows 2000 Professional to process both foreground and background applications at the same priority？ （）

    • A、By selecting the applications options in the performance options dialog box.
    • B、By selecting the application services option in the performance options dialog box.
    • C、By selecting the background option in the performance options dialog box.
    • D、By selecting the background services option in the performance options dialog box.

    正确答案:D

  • 第20题：

    单选题
    Which statement about an IPS is true？（）
    A

    The IPS is in the traffic path.

    B

    Only one active interface is required.

    C

    Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.

    D

    When malicious traffic is detected，the IPS will only send an alert to a management station.


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    You need to enhance performance of foreground and background applications. How can you configure Windows 2000 Professional to process both foreground and background applications at the same priority？ （）
    A

    By selecting the applications options in the performance options dialog box.

    B

    By selecting the application services option in the performance options dialog box.

    C

    By selecting the background option in the performance options dialog box.

    D

    By selecting the background services option in the performance options dialog box.


    正确答案： D
    解析： 暂无解析

  • 第22题：

    多选题
    Which three statements accurately describe IOS Firewall configurations？（）
    A

    The IP inspection rule can be applied in the inbound direction on the secured interface

    B

    The IP inspection rule can be applied in the outbound direction on the unsecured interface

    C

    The ACL applied in the inbound direction on the unsecured interface should be an extendedACL.

    D

    For temporary openings to be created dynamically by Cisco IOS Firewall， the access-list for thereturning traffic must be a standard ACL


    正确答案： B,A
    解析： 暂无解析

  • 第23题：

    单选题
    Which statement about IDS/IPS design is correct？（）
    A

     An IPS should be deployed if the security policy does not support the denial of traffic.

    B

     An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.

    C

     An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.

    D

     Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.


    正确答案： A
    解析： 暂无解析

相关内容