642-531 (CSIDS) TestKing's Cisco Secure Intrusion Detection Systems Version 22.1
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 10 - Cisco router but mistakenly enters the wrong pas
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 100 - applied, they change the version number of a se
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 101 - ftp://[email protected]/ids-k9-sp4.0-2-s29.bin
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 102 - • You must have access to the IDS MC server if
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 103 - - FTP - HTTP/HTTPS - SCP QUESTION NO: 5 Which
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 104 - E. IDSk9-sp-3.1-2-S23-bin –apply F. IDSk9-sp-
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 105 - C. Maintenance partition for the blade D. Ser
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 106 - Note: …what about 4220? For 4220, in this list
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 107 - Topic 9, Describe the Cisco IDS architecture i
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 108 - Answer: E Explanation: [client] --- HTTPS ---
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 109 - QUESTION NO: 5 The new TestKing trainee techn
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 11 - A Cisco IDS Sensor has been configured to detect
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 110 - QUESTION NO: 7 Which Cisco IDS communication
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 111 - Cisco Secure IDS Director or Cisco Secure PM
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 112 - Explanation: Cisco Courseware 6-4 QUESTION N
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 113 - Section 4: List the Cisco IDS services and th
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 114 - requestor is assigned a cookie containing a use
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 115 - Enter or delete the IP addresses of hosts and n
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 116 - Explanation: Packetd - The packetd daemon inte
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 117 - Topic 10, Monitor a Cisco IDS protection solut
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 118 - D. SSH Answer: A Explanation: To specify th
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 119 - How are IDS device added into IDS Even Viewer?
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 12 - Section 3: Describe the relationship between vu
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 120 - In the Cisco IDS Event Viewer, how do you dis
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 121 - After 1EV has been configured to receive alar
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 122 - Section 6: Perform IEV database administratio
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 123 - QUESTION NO: 2 When enabling time schedules f
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 124 - Topic 11, Manage a large scale deployment of C
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 125 - Explanation: • IDS_Analyzer—To check that the
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 126 - Note: What is the IDS MC? The IDS MC is a web
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 127 - In the Cisco IDS Management Center, what workfl
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 128 - Reference: Cisco IOS Intrusion Detection System
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 129 - Section 5: Use the IDS MC to set up Sensors
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 13 - Section 4: Explain the difference between HIP
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 130 - Section 6: Use the IDS MC to configure Sensor
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 131 - According to the exhibit depicting the RDEP p
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 132 - A. The option increases security of Sensor co
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 133 - What is the purpose of the NAT address field
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 134 - Section 7: Use the IDS MC to configure Sensor l
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 135 - Topic 12, Monitor a large scale deployment of
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 136 - called Watchdog, helps you track the state and
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 137 - Section 3: Monitor IDS devices with the Secur
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 138 - A. events B. sensors C. statistics D. signa
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 139 - Section 4: Administer Security Monitor event r
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 14 - Early intrusion detection wa easily evaded by di
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 140 - A. Data source B. IP fragment reassembly C.
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 141 - Note: VMS Security Monitor (= the Monitoring Ce
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 142 - Answer: B Explanation: Devices using RDEP to
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 143 - - Org ID - Port - Heartbeat Note: …only requir
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 144 - Topic XIII, Simulations (7 questions) This se
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 145 - Answer: login: testking password:testking1636
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 146 - Answer: a. Enter configure terminal mode: s
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 147 - sensor(config-Host-net)# show settings networkP
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 148 - Assignment: Click on the picture of the host
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 149 - You work as network security administrator at t
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 15 - Reference: Cisco Intrusion Detection System - C
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 150 - sensor(config-Host)#networkParams
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 151 - D) Give your trainee Tess King, the daughter o
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 152 - You work as a network security administrator
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 153 - c. Enter network parameters configuration mode:
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 154 - Cisco IDS Paramaters Settings Sensor Host ID
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 155 - E. Sensor IP address - 192.168.1.4/24 Type &q
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 156 - Topic XIV Misc. questions (7 questions) This
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 157 - Answer: Reference: Cisco Courseware 6-4 QU
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 158 - • Schedule, download, and install software upgr
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 159 - C. UDP packets D. ARP packets Answer: A, D
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 16 - Topic 2, Design a Cisco IDS protection solution
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 160 - Topic XV Cisco secure pix firewall questions (
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 161 - Answer: A Explanation: The ca authenticate com
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 162 - QUESTION NO: 5 What command could you use on y
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 163 - D. debug crypto Answer: A Explanation: The d
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 164 - QUESTION NO: 10 Which common command are you
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 165 - Explanation: Two things are required for traff
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 166 - B. The Conduit is where the data travels on th
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 167 - If you wanted to show the running configuration
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 168 - • Archie • Berkeley Standard Distribution (B
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 17 - ANSWER: A, C Cisco Courseware 4-11 (IOS) Cisco
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 18 - C. Network taps D. Router Answer: A Explanat
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 19 - Section 2: Describe the traffic flows for each
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 2 - Important Note, Please Read Carefully Study Tips
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 20 - Answer: D The Sensor is on the same network, so
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 21 - B IDSM2 is limited to 62 signatures C IDSM2 ca
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 22 - Answer: B Cisco Press CCSP Self-Study CSIDS, p
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 23 - What are the two methods used to initially acces
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 24 - Cisco Courseware 12-7 QUESTION NO: 2 Followin
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 25 - filter keyword in monitor session command -----&
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 26 - According to the exhibit Fast Ethernet connect
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 27 - vlans...] [create] Reference: Cisco Coursewar
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 28 - D the mls ip ids command processes capture in h
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 29 - Study the exhibit below carefully: According
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 3 - Table of contents Topic 1, Describe and expla
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 30 - Note: Does the 4000 switch really support VACLs?
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 31 - A. fasthub(config)# monitor session 1 source in
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 32 - B. Map the VLAN access map to a VLAN. C. Use c
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 33 - Refer to the exhibit. All switches are connect
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 34 - set security acl ip acl_name permit tcp src_ip_s
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 35 - Answer: Explanation: Ingress SPAN copies ne
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 36 - Topic 3, Identify the Cisco IDS Sensor platform
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 37 - Which sensor appliance does not support the conn
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 38 - Topic 4, Install and configure a Cisco IDS Sens
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 39 - Answer: D Page 8-8 CSIDS Courseware under IDSM
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 4 - Section 2: Configure a signature's enable st
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 40 - QUESTION NO: 4 Which user account is used to l
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 41 - Events can be retrieved through the Sensor’s web
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 42 - Cisco Courseware 9-40 QUESTION NO: 3 Network
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 43 - QUESTION NO: 4 Network topology exhibit/simulati
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 44 - QUESTION NO: 5 Network topology exhibit/simulati
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 45 - A. Not logging alarms, commands, and errors. B
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 46 - Postofficed The postofficed daemon serves as the
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 47 - NRS-2E IDS 3.0 and IDS 3.1 NRS-2FE IDS 3.0 and
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 48 - I am not sure about this question. The latest c
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 49 - Section 6: Obtain management access on the Sens
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 5 - Section 2: Install the IDS MC (0 questions)...
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 50 - Cisco Courseware 7-22, 7-23 QUESTION NO: 3 Wh
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 51 - QUESTION NO: 5 A company policy states that IDS
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 52 - Section 7: Initialize the Sensor (2 questions)
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 53 - Explanation: The interface sensing configuratio
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 54 - A. IDS event Viewer B. Cisco ConfigMaker C. C
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 55 - cidServer version – If you are having difficu
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 56 - • Operators—This user role has the second highe
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 57 - E Guest Answer: A Privileges: Allowed levels
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 58 - D. "tls generate-key" command generat
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 59 - Section 13: Configure Sensor logging propertie
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 6 - Topic 1, Describe and explain the various intrus
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 60 - Section 14: Perform a configuration backup vi
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 61 - D. Manually enter the correct software version
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 62 - Reference: Cisco Courseware 12-3 QUESTION NO: 4
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 63 - QUESTION NO: 6 Which of the following options ar
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 64 - Section 16: Sensor Communications Sensor Logg
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 65 - The sensor compares the list of signatures with
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 66 - Topic 5: Tune and customize Cisco IDS signature
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 67 - The goal of defining these reassembly settings i
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 68 - ANSWER: C, D, E QUESTION NO: 2 How do you co
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 69 - QUESTION NO: 2 What information can a network se
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 7 - QUESTION NO: 2 Which of the following types of a
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 70 - Section 4: Tune a signature to perform optimally
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 71 - Answer: B FireAll is default. AlamInterval doe
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 72 - A. ATOMIC.IPOPTIONS B. SERVICE.MSSQL C. SERV
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 73 - Topic 6, Configure a Cisco IDS Sensor to perfor
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 74 - QUESTION NO: 3 Which of the following Cisco IDS
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 75 - The blocking device must have one of the followi
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 76 - Section 2: Design a Cisco IDS solution using t
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 77 - B. ACL applied to the internal (trusted) interf
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 78 - C. Router runs the packet against ACL, tags it
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 79 - Which type of ACL is allowed when implementing t
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 8 - QUESTION NO: 4 Which of the following is typic
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 80 - Answer: B Explanation: PIX Firewall You can
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 81 - Cisco Courseware 15-30 QUESTION NO: 2 Which o
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 82 - Blocking with Multiple Sensors Multiple sensors
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 83 - Course ver 4.0 page 6-4 CtlTransSource allows se
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 84 - Topic 7, Describe the Cisco IDS signatures and
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 85 - Answer: B Cisco Courseware 13-41 QUESTION NO
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 86 - QUESTION NO: 5 Which Cisco IDS signatures are
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 87 - Answer: Reference: Cisco Secure Intrusion
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 88 - Answer: C Signature Structure As previously dis
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 89 - Given the following signature engines, which wou
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 9 - An individual sensor contains two separate interf
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 90 - Answer: C Explanation: SERVICE.* Engines Use th
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 91 - Which statement is true when creating custom sig
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 92 - E. String.UDP Answer: E (or D) Note: I am not
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 93 - Answer: C Explanation: Protected—The protected
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 94 - Log Reset ShunHost ShunConnection
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 95 - Answer: C, E Explanation: Both Regex and Service
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 96 - Answer: C E Explanation: Engine parameters
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 97 - Reference: Working With Signature Engines Q
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 98 - Reference: Cisco Secure Intrusion Detection Sys
642 -531 Leading the way in IT testing and certification tools, www.testking.com - 99 - Topic 8, Perform maintenance operations such as
Comentários a estes Manuais