Cisco IOS IPS sends IPS alert messages using which two proto

第1题：

Examine the following items， which one offers a variety of security solutions， including firewall， IPS， VPN，antispyware， antivirus， and antiphishing features？（）

• A、Cisco IOS router
• B、Cisco PIX 500 series security appliance
• C、Cisco 4200 series IPS appliance
• D、Cisco ASA 5500 series security appliance

第2题：

What is a requirement to enable Cisco IOS IPS with 5.x signature？（）

• A、disable Zone-Based Firewall as the two features are not compatible
• B、disable Cisco Express Forwarding as the two features are not compatible
• C、generate a certificate and export on Cisco.com to receive a signature update
• D、import the public RSA key from the Cisco IPS team that allows the router to verify that a signatureupdate （which was signed by this key） comes from Cisco

第3题：

What are two characteristics of the SDM Security Audit wizard？（）

• A、displays a screen with Fix-it check boxes to let you choose which potential security-related configuration changes to implement
• B、has two modes of operationinteractive and non-interactive
• C、automatically enables Cisco IOS firewall and Cisco IOS IPS to secure the router
• D、uses interactive dialogs and prompts to implement role-based CLI
• E、requires users to first identify which router interfaces connect to the inside network and which connectto the outside network

第4题：

What host-based IPS solution provides threat-protection capabilities for server and desktop computing systems？（）

• A、 Cisco IPS AIM
• B、 Cisco IOS IPS
• C、 Cisco IPS NME
• D、 Cisco Security Agent
• E、 Cisco IDSM-2

第5题：

Which two IOS commands are equivalents for putting a Cisco 7500 OC-12 RPR interface card intowrapped mode？ （）

• A、shutdown [a b]
• B、srp shutdown [a b]
• C、srp ips request manual-switched [a b]

第6题：

Which IOS security feature is configured by the ip inspect inspection-name {in | out} command？（）

• A、IPsec site-to-site VPN
• B、Cisco AutoSecure
• C、Cisco IOS Firewall
• D、IPS

第7题：

When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）

• A、On the RAM of the ISR
• B、On the USB memory stick of the ISR
• C、On the NVRAM of the ISR
• D、On the IPS Module of the ISR
• E、On the Flash memory of the ISR

第8题：

Which of the following is true about the Cisco IOS-IPS functionality？ （）

• A、 The signatures available are built into the IOS code.
• B、 Toupdate signatures youneed to install a new IOS image
• C、 To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
• D、 Loading and enabling selected IPS signatures is user configurable
• E、 Cisco IOS onlyprovides Intrusion Detection functionality
• F、 Cisco IOS-IPS requires a network module installed in your router running sensor software

第9题：

What is the main reason for using the "ip ips deny-action ips-interface" IOS command？（）

• A、 To selectively apply drop actions to specific interfaces
• B、 To enable IOS to droptraffic for signatures configured with the Drop action
• C、 To support load-balancing configurations in which traffic can arrive via multipleinterfaces 
• D、 This is nota valid IOS command

第10题：

Cisco IOS IPS sends IPS alert messages using which two protocols？ （）

• A、 SDEE
• B、 LDAP
• C、 SYSLOG
• D、 FTP
• E、 SNMP
• F、 SMTP