Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha Técnica descarregar pdf (Página 51)

642-531

D. SSH

E. serial console

Answer: B, D

Page 379 Cisco Press CCSP CSIDS 2nd edition under IP Blocking Devices-Cisco Routers

To manipulate the ACLs on the managed device, you must configure the following on your managed devices:

- Telnet access (vty) enabled

- Line password assigned to vty

- Secure Shell (SSH) access allowed from sensor (or Telnet)

- Router's enable password assigned

QUESTION 117

The new Certkiller trainee technician wants to know what the default duration for an automatic block on

an IDS blocking device is.What would your reply be?

A. 1 minute

B. 10 minutes

C. 30 minutes

D. default time period is unlimited(permanent block)

E. there is no default block period, it must be configured

Answer: C

Page 15-9 CSIDS Courseware under Blocking Guidelines

Blocking duration - By default the Sensor will automatically block for 30mins

QUESTION 118

Which of the following Cisco IDS platforms are capable of responding to active attacks by initiating

either shunning or blocking? (Choose two.)

A. PIX-IDS

B. Network appliance IDS

C. IOS-IDS

D. Switch IDS module

E. Host IDS

Answer: A, D

NAC block actions are initiated by IDS Sensors - executed by PIX and routers and featured switches.

See also Cisco Courseware 4-9, 4-10, 4-11, 4-12

Cisco Courseware 15-10

QUESTION 119

Which of the following represents the limitation for IDS Sensor blocking?

A. 10 interface/directions across all devices

B. 100 interface/directions across all devices

C. 10 interface/directions maximum per devices

1 2 ... 46 47 48 49 50 51 52 53 54 55 56 ... 122 123

Sem comentários

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Ficha Técnica Página 51