Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha de datos descargar pdf (Pagina 33)

642 -531

Leading the way in IT testing and certification tools, www.testking.com

- 33 -

Refer to the exhibit. All switches are connected through Fast Ethernet connections.

Server TESTKING2 is in VLAN 3.

Which command represents a valid configuration step to permit Sensor IDS1 to monitor

traffic sent from Server TESTKING2?

A. 2950(config)# monitor session 1 source interface fastEthernet 0/5 tx

B. 2950(config)# monitor session 1 source interface fastEthernet 0/5 rx

C. 2950(config)# port monitor fastEthernet 0/5

D. 2950(config)# port monitor vlan 3 Interface fastEthernet 0/24 both

E. 2950>(enable) set span 0/5 0/24 both

ANSWER: B

sent FROM server, RECEIVED by fastEthernet 0/5 -> rx

Cisco Courseware 5-16

Note: The reason is not A. because you want to monitor receive traffic from the server. It is not C.

because the port monitor fastEthernet 0/5 command should be done in the (config-if)# mode. D and

E are incorrect.

QUESTION NO: 16

Which VLAN ACL sends only ftp traffic to a Cisco IDS Sensor connected to a Catalyst

6500 switch?

A. set security acl ip FTP_ACL permit udp any any eq 21

B. set security acl ipx FTP_ACL permit ip any any capture

C. set security acl ipx FTP_ACL permit tcp any any eq 21

D. set security acl ip FTP_ACL permit tcp any any eq 21 capture

E. set security acl ip FTP_ACL permit ip any any capture

F. set security acl ip FTP_ACL permit icmp any any eq 21

Answer: D

Explanation:

To create a VACL, you need to use the set security acl ip switch command. The syntax for

capturing TCP traffic between a source IP address and a destination IP address is as follows:

1 2 ... 28 29 30 31 32 33 34 35 36 37 38 ... 167 168

Sin comentarios

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha de datos Pagina 33