When enabling IPS on an ISR using the Cisco SDM IPS Wizard， 

第1题：

Which Cisco security tool can best determine it a Cisco ISR router is properly secured？ （）

• A、 Cisco SDM Security Audit
• B、 Cisco Security MARS
• C、 Cisco Security Agent MC
• D、 Cisco Security IntelliShield
• E、 CAN

第2题：

To protect the network from external and internal threats， where should Cisco IPS be enabled on an ISR？（）

• A、Globally on the ISR
• B、On the Console and Auxiliary Ports of the ISR
• C、On the untrusted （Outside） interface of the ISR
• D、On the trusted （Inside） interface of the ISR
• E、On the WAN and LAN interfaces of the ISR

第3题：

What are two characteristics of the SDM Security Audit wizard？（）

• A、displays a screen with Fix-it check boxes to let you choose which potential security-related configuration changes to implement
• B、has two modes of operationinteractive and non-interactive
• C、automatically enables Cisco IOS firewall and Cisco IOS IPS to secure the router
• D、uses interactive dialogs and prompts to implement role-based CLI
• E、requires users to first identify which router interfaces connect to the inside network and which connectto the outside network

第4题：

Cisco IOS IPS sends IPS alert messages using which two protocols？ （）

• A、 SDEE
• B、 LDAP
• C、 SYSLOG
• D、 FTP
• E、 SNMP
• F、 SMTP

第5题：

Which statement is correct about the Cisco QoS SDM wizard？（）

• A、the best-effort class will need to have its percentage entered in the QoS Policy Generation screen
• B、SDM QoS wizard provides real-time validation of application usage of WAN bandwidth
• C、the SDM wizard is not able to monitor QoS policing traffic
• D、the SDM QoS wizard is pre-installed on enterprise routers

第6题：

Examine the following items， which one offers a variety of security solutions， including firewall， IPS， VPN，antispyware， antivirus， and antiphishing features？（）

• A、Cisco IOS router
• B、Cisco PIX 500 series security appliance
• C、Cisco 4200 series IPS appliance
• D、Cisco ASA 5500 series security appliance

第7题：

When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）

• A、On the RAM of the ISR
• B、On the USB memory stick of the ISR
• C、On the NVRAM of the ISR
• D、On the IPS Module of the ISR
• E、On the Flash memory of the ISR

第8题：

Which of the following is true about the Cisco IOS-IPS functionality？ （）

• A、 The signatures available are built into the IOS code.
• B、 Toupdate signatures youneed to install a new IOS image
• C、 To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
• D、 Loading and enabling selected IPS signatures is user configurable
• E、 Cisco IOS onlyprovides Intrusion Detection functionality
• F、 Cisco IOS-IPS requires a network module installed in your router running sensor software

第9题：

What host-based IPS solution provides threat-protection capabilities for server and desktop computing systems？（）

• A、 Cisco IPS AIM
• B、 Cisco IOS IPS
• C、 Cisco IPS NME
• D、 Cisco Security Agent
• E、 Cisco IDSM-2

第10题：

What statement is true of how a customer acquires Intrusion Prevention and Content Security services in a  Cisco security solution？（）

• A、 The Cisco security portfolio includes a third-party IPS.
• B、 A hardware module addition is required on the ISR platforms.
• C、 They are bundled on the ASA 5505.
• D、 A hardware module addition is required on the ASA 5510/5520.