Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Pobierz pdf (Strona 28)

642 -531

Leading the way in IT testing and certification tools, www.testking.com

- 28 -

D the mls ip ids command processes capture in hardware versus software

E the mls ip ids command is used with keywords to define interesting traffic

Answer: C

Page 5-45 CSIDS Courseware under Using the mls ip ids command for Catalyst 6500 Traffic

capture

1)Create an ACL to capture interesting traffic

2)Select the VLAN interface

3)Apply the ACL to the interface

4)Assign the Sensor's monitoring port as a VACL capture port

Note: The ml sip ids command is used to apply an extended IP access list to the VLAN

interface.

Cisco Courseware 5-48

QUESTION NO: 7

Study the exhibit below carefully:

According to the exhibit all switches are connected through Fast Ethernet connections. The

Catalyst 4000 is running Catalyst OS . Sensor IDTestKing is configured to send TCP resets in

response to specific signatures.

Which command argument in the Catalyst 4000’s SPAN configuration will allow the switch

to receive the TCP resets sent from Sensor IDTestKing3

A rx

B both

C ingress

D tcp-rst accept

E inpkts enable

F This feature is not supported in this configuration

Answer: E

IDS course 4.0 page 5-19 Keyworks to enable the receiving of normal inbound traffic in the

SPAN destination port.

QUESTION NO: 8

1 2 ... 23 24 25 26 27 28 29 30 31 32 33 ... 167 168

Brak uwag

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Strona 28