
642-531
In the Cisco IDS Event Viewer, how do you display the context data associated with an event?
A. Choose View>Context Data from the main menu.
B. Right-click the event and choose Show Data.
C. Choose View>Show data from the main menu.
D. Right-click the event and choose Show Context.
E. Choose View>Show Context from the main menu.
F. Double-click the event.
Answer: D
Explanation:
Certain alarms may have context data associated with them. Context data provides a snapshot of the incoming
and outgoing binary TCP traffic (up to a maximum of 256-bytes in both directions) that preceded the triggering
of the signature. To view the context for an alarm, follow these steps:
Step 1 From the Alarm Information Dialog, right-click a cell in the Context column, and then select Show
Context.
Step 2 Scroll to view the context associated with this alarm.
Reference: Cisco Intrusion Detection System Event Viewer Version 3.1
Also see Cisco Secure Intrusion Detection System 4 chap 10 page 20
QUESTION 202
Exhibit:
After 1EV has been configured to receive alarms from Sensors, how do you display the alarms in the Cisco IDS
Comentários a estes Manuais