Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list stáhnout pdf (Strana 82)

642-531

QUESTION 191

Which network services are enabled by default on a Cisco IDS Sensor for remote management? (Choose

all that apply)

A. SSH

B. TFTP

C. SNMP

D. Telnet

E. RSH

F. FTP

Answer: A, F

Explanation:

Telnet - requires an IP address that has been assigned to the command and control interface via the CLI setup

command. Must be enabled to allow telnet access. Telnet is DISABLED by default.

SSH - Requires an IP address that has been assigned to the command and control interface via the CLI setup

command and uses a supported SSH client. The SSH server in the sensor is ENABLED by default.

HTTPS - Requires an IP address that has been assigned to the command and control interface via the CLI setup

command and uses a supported web browser. HTTPS is ENABLED by default but can be disabled.

Cisco Secure Intrusion Detection System 4 chap 7 page 23

Note:For IDS Sensor Version 4.0 the Telnet is disabled by default since it is insecure. Instead SSH is used.

QUESTION 192

What Cisco IDS Sensor secure shell operation enables a network security administrator to remove hosts from

the list of those previously connected to devices?

A. Generate new Sensor SSH keys.

B. Generate new Director SSH keys.

C. Manage the Sensor's known hosts file.

D. Manage the Director's known hosts file.

Answer: C

Explanation: Access to the probe is determined by a ACL but note in chap 12 the MC deals with SSH key

generation.

Sensor#config t

Sensor#(Config)#service host

Sensor#(config-host)networkParams

Sensor#(config-host-net) accesslist ip address 10.0.2.0 netmask 255.255.255.0 ----adds an entire network to the

access list

Cisco Secure Intrusion Detection System 4 chap 9 page 31

QUESTION 193

Which Cisco IDS service must be running if a Sensor is capturing network traffic?

1 2 ... 77 78 79 80 81 82 83 84 85 86 87 ... 122 123

Žádné komentáře

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Datový list Strana 82