
642 -531
Leading the way in IT testing and certification tools, www.testking.com
- 66 -
Topic 5: Tune and customize Cisco IDS
signatures to work optimally in specific
environments (12 questions)
Section 1: Configure the Sensor's sensing parameters (3 questions)
QUESTION NO: 1
Which of the following fields will you advice the new TestKing trainee technician to
populate when creating custom signatures with IDS MC? (Choose all that apply.)
A. SubSigID
B. signature name
C. engine description
D. engine name
E. signature string
Answer: B, D
The two required fields are Signature Name & Engine
Reference:
Cisco Courseware 14-33
Page 365 Cisco Press CCSP CSIDS 2nd edition under Creating Custom Signatures
See screenshot, fields marked with * are required.
* Signature name
* Engine
QUESTION NO: 2
Which TCP session reassembly configuration parameter enforces that a valid TCP
session be establish before the Cisco IDS Sensor’s sensing engine analyzes the traffic
associated with the session?
A. TCP open establish timeout
B. TCP embryonic timeout
C. TCP closed timeout
D. TCP three way handshake
E. TCP sequence timeout
Answer: D
Explanation:
Komentarze do niniejszej Instrukcji