Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list stáhnout pdf (Strana 69)

642-531

Answer: C E

Explanation:

Engine parameters have the following attributes:

1) Protected - If a parameter is protected, you cannot change if for the default signatures. You can modify it for

custom signatures.

2) Required - If a parameter is required, you must define it for all signatures, both default signatures and custom

signatures.

Reference:Page 438 CCSP Self-study: CSIDS Second Edition

Cisco Courseware 13-16

QUESTION 160

With the ATOMIC.TCP signature parameter PortRangeSource is set to 0 (zero), which ports will be examined?

A. This setting will disable port inspection.

B. This is a protected setting and cannot be set to 0 (zero).

C. All ports destined to the source will be inspected.

D. All ports from the source will be inspected.

E. None of the above.

Answer: D

Explanation:

Reference:

Working With Signature Engines

QUESTION 161

An ACL policy violation signature has been created on a Cisco IDS Sensor. The Sensor is configured to

receive policy violations from a Cisco IOS router.

What configurations must exist on the router? (Choose two)

A. Logs permit ACL entries

1 2 ... 64 65 66 67 68 69 70 71 72 73 74 ... 122 123

Žádné komentáře

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list Strana 69