When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）A、On the RAM of the ISRB、On the USB memory stick of the ISRC、On the NVRAM of the ISRD、On the IPS Module of the ISRE、On the Flash memory of the ISR
When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）
- A、On the RAM of the ISR
- B、On the USB memory stick of the ISR
- C、On the NVRAM of the ISR
- D、On the IPS Module of the ISR
- E、On the Flash memory of the ISR
相关考题：
What are three necessary steps for enabling 802.1X access when configuring Layer 2 enforcement?() A. Configure a location groupB. Createan authentication protocol setC. Configure the RADIUS AV pair listD. Configure RADIUS clientsE. Configure role and role-mapping rules
Which statement is true when you enable SSL for the WebUI?() A. SSL is enabled for the WebUI by default.B. You must address the WebUI using HTTPS://.C. You must change the WebUI port when enabling SSL.D. The demokey and democert are applied to the WebUI by default.
You have configured voice VLANs on Catalyst switch R1. Which two statements are true about the operation of voice VLANs on this device？ （）A、 When the voice VLAN feature is enabled， all untagged traffic is sent according to the default CoS priority of the port.B、 Enabling voice VLANs enables the switch to create multiple queues for traffic that is entering a port.C、 When voice VLANs are configured on a trunk link， UplinkFast must also be enabled.D、 Voice VLANs are configured to enable the switch to forward frames marked with the proper CoS values over separate physical links.E、 Enabling voice VLANs enables the switch to forward frames with a specific 802.1P marking.
Which of the following would be the correct location to access when enabling Driver Signature Verification？（）A、On the hardware tab in System Properties.B、In the Security Center applet in Control Panel.C、In Device Manager under the File menu and options.D、In Computer Management.
Which two statements are true regarding trace options on Junos devices?（）A、You can see the contents of the log file by entering the show log filename commandB、Trace options will send information to your screen automaticallyC、Trace options are limited to one protocol at a timeD、The file name and set of flags may be specified when enabling trace options
下列关于IPS的说法中，错误的是（）。A、IPS一般以在线方式部署在网络关键路径B、IPS是一种基于应用层检测的设备C、IPS区别于IDS的重要一点是IPS可以主动防御攻击D、IPS天然可以防范所有大的攻击，不需要升级特征库
IPS与IDC的主要区别是（）A、IPS可以检测网络攻击，但是不能发出警告B、IPS可以检测网络攻击并发布警告C、IPS可以通过阻止流量并重新连接来回应网络攻击D、IPS是在线的并可以监控流量
Which statement about an IPS is true？（）A、The IPS is in the traffic path.B、Only one active interface is required.C、Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.D、When malicious traffic is detected，the IPS will only send an alert to a management station.
Which of these is mandatory when configuring Cisco IOS Firewall？ （）A、Cisco IOS IPS enabled on the untrusted interfaceB、NBAR enabled to perform protocol discovery and deep packet inspectionC、a route map to define the trusted outgoing trafficD、a route map to define the application inspection rulesE、an inbound extended ACL applied to the untrusted interface
Which two statements describe the functions and operations of IDS and IPS systems？（）A、A network administrator entering a wrong password would generate a true-negative alarm.B、A false positive alarm is generated when an IDS/IPS signature is correctly identified.C、An IDS is significantly more advanced over IPS because of its ability to prevent network attacks.D、Cisco IDS works inline and stops attacks before they enter the network.E、Cisco IPS taps the network traffic and responds after an attack.F、Profile-based intrusion detection is also known as "anomaly detection".
Refer to the exhibit. What is the configuration an example of？（）A、enabling modular QoS over Frame RelayB、enabling Real-Time Transport Protocol （RTP） header compressionC、enabling distributed compressed Transmission Control ProtocolD、enabling latency and jitter reduction for Transmission Control trafficE、enabling TCP header compression
Which statement is true when you enable SSL for the WebUI?（）A、SSL is enabled for the WebUI by default.B、You must address the WebUI using HTTPS://.C、You must change the WebUI port when enabling SSL.D、The demokey and democert are applied to the WebUI by default.
单选题When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）AOn the RAM of the ISRBOn the USB memory stick of the ISRCOn the NVRAM of the ISRDOn the IPS Module of the ISREOn the Flash memory of the ISR
单选题Which statement is true when you enable SSL for the WebUI?（）ASSL is enabled for the WebUI by default.BYou must address the WebUI using HTTPS://.CYou must change the WebUI port when enabling SSL.DThe demokey and democert are applied to the WebUI by default.
单选题Which of the following would be the correct location to access when enabling Driver Signature Verification？（）AOn the hardware tab in System Properties.BIn the Security Center applet in Control Panel.CIn Device Manager under the File menu and options.DIn Computer Management.
单选题Examine the following options ，when editing global IPS settings， which one determines if the IOS- basedIPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for thatengine is being compiled？（）AEnable Signature DefaultBEnable Engine Fail ClosedCEnable Default IOS Signature ActualTests.comDEnable Fail Opened
单选题What does Cisco recommend when you are enabling Cisco IOS IPS？（）ADo not enable all the signatures at the same time.BDo not enable the ICMP signature.CDisable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.DDisable CEF because it is not compatible with Cisco IOS IPS. .
多选题Which of the following is true about the Cisco IOS-IPS functionality？ （）AThe signatures available are built into the IOS code.BToupdate signatures youneed to install a new IOS imageCTo activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web siteDLoading and enabling selected IPS signatures is user configurableECisco IOS onlyprovides Intrusion Detection functionalityFCisco IOS-IPS requires a network module installed in your router running sensor software
多选题What are three necessary steps for enabling 802.1X access when configuring Layer 2 enforcement?（）AConfigure a location groupBCreatean authentication protocol setCConfigure the RADIUS AV pair listDConfigure RADIUS clientsEConfigure role and role-mapping rules
多选题IDS和IPS技术使用（）部署方式A基于防火墙的IPS部署B基于软件的IPS部署C基于网络的IPS部署D基于主机的IPS部署