Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha de datos descargar pdf (Pagina 74)

642 -531

Leading the way in IT testing and certification tools, www.testking.com

- 74 -

QUESTION NO: 3

Which of the following Cisco IDS platforms are capable of responding to active attacks

by initiating either shunning or blocking? (Choose two.)

A PIX-IDS

B Network appliance IDS

C IOS-IDS

D Switch IDS module

E Host IDS

Answer: A, D

NAC block actions are initiated by IDS Sensors - executed by PIX and routers and featured

switches.

See also Cisco Courseware 4-9, 4-10, 4-11, 4-12

Cisco Courseware 15-10

QUESTION NO: 4

Which of the following represents the limitation for IDS Sensor blocking?

A. 10 interface/directions across all devices

B. 100 interface/directions across all devices

C. 10 interface/directions maximum per devices

D. 100 interface/directions maximum per devices

E. 10 interface (both directions) across all devices

Answer: A

Page 383 Cisco Press CCSP CSIDS 2nd edition under IP Blocking: Network Topology

A single sensor can only perform IP Blocking on a maximum of 10 interfaces across one or

more managed devices

Cisco Courseware 15-3

QUESTION NO: 5

Which of the following can a blocking Sensor utilize to manage a PIX Firewall for

shunning? (Choose all that apply.)

A. RDEP

B. Telnet

C. SSLand

D. SSH

E. serial console

Answer: B, D

Page 15-7 CSIDS Courseware under Blocking Device Requirements

1 2 ... 69 70 71 72 73 74 75 76 77 78 79 ... 167 168

Sin comentarios

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha de datos Pagina 74