What host-based IPS solution provides threat-protection capabilities for server and desktop computing systems？（）A、 Cisco IPS AIMB、 Cisco IOS IPSC、 Cisco IPS NMED、 Cisco Security AgentE、 Cisco IDSM-2

第1题：

Which of the following is true about the Cisco IOS-IPS functionality？ （）

• A、 The signatures available are built into the IOS code.
• B、 Toupdate signatures youneed to install a new IOS image
• C、 To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
• D、 Loading and enabling selected IPS signatures is user configurable
• E、 Cisco IOS onlyprovides Intrusion Detection functionality
• F、 Cisco IOS-IPS requires a network module installed in your router running sensor software

第2题：

Examine the following items， which one offers a variety of security solutions， including firewall， IPS， VPN，antispyware， antivirus， and antiphishing features？（）

• A、Cisco IOS router
• B、Cisco PIX 500 series security appliance
• C、Cisco 4200 series IPS appliance
• D、Cisco ASA 5500 series security appliance

第3题：

第4题：

What are two security features of the Cisco Secure Router 500 Series？ （）

• A、Cisco Intrusion Prevention System
• B、Cisco IOS Software Firewall
• C、Cisco IOS Easy VPN
• D、Cisco Unified Wireless Networking
• E、Cisco ASA Hardware Firewall

第5题：

Which Cisco product is a software component that blocks unwanted connections and provides other gateway security functions for small business?（）

• A、Cisco Firewall Services Module (FWSM)
• B、Cisco Secure Access Control Server (ACS)
• C、Cisco Private Internet Exchange (PIX) Firewall
• D、Cisco Internetwork Operating System (IOS) Firewall

第6题：

Which two features or capabilities are valid options for both an Autonomous WLAN solution and a  Lightweight WLAN solution？ （）

• A、 PoE capability
• B、 Use of Cisco Secure Access Control Server （ACS） for security
• C、 Cisco IOS software for configuration
• D、 Cisco Wireless Control System （WCS） for management
• E、 Use of a Cisco Wireless Location Appliance location for tracking

第7题：

Which IOS security feature is configured by the ip inspect inspection-name {in | out} command？（）

• A、IPsec site-to-site VPN
• B、Cisco AutoSecure
• C、Cisco IOS Firewall
• D、IPS

第8题：

Cisco Clean Access ensures that computers connecting to your network have which of the following？（）

• A、 No vulnerable applications or operating systems
• B、 No viruses or worms
• C、 Appropriate security applications and patch levels
• D、 Current IPS signatures
• E、 Cisco Security Agent

第9题：

What is a requirement to enable Cisco IOS IPS with 5.x signature？（）

• A、disable Zone-Based Firewall as the two features are not compatible
• B、disable Cisco Express Forwarding as the two features are not compatible
• C、generate a certificate and export on Cisco.com to receive a signature update
• D、import the public RSA key from the Cisco IPS team that allows the router to verify that a signatureupdate （which was signed by this key） comes from Cisco

第10题：

What does Cisco recommend when you are enabling Cisco IOS IPS？（）

• A、Do not enable all the signatures at the same time.
• B、Do not enable the ICMP signature.
• C、Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.
• D、Disable CEF because it is not compatible with Cisco IOS IPS. .