Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Pobierz pdf (Strona 17)

642-531

traffic sent to and from VLAN3, VLAN4, and VLAN5?

A. 6500(config)# monitor session 1 source vlan 3, 4, 5 both

B. 6500(config)# monitor session 1 destination idsm

C. This feature is not supported in this configuration.

D. 6500>(enable) set span source vlan-list 3- 5 destination interface 8/1 both create

E. 6500>(enable) set span 3 - 5 8/1 both

Answer: A

Explanation:

Switch(config)#monitorsession{session_number}{source{interfacetype/num}|{vlanvlan_ID}}[,|-|rx|tx|both]

Specifies the SPAN session number (1 through 6), the source interfaces (FastEthernet or GigabitEthernet), or

VLANs (1 through 1005), and the traffic direction to be monitored.

Reference:Cisco Courseware 5-20

QUESTION 41

What function does themls ip ids command perform when used for traffic capture?

A. the mls ip ids command assigns a port to receive capture traffic

B. the mls ip ids command selects all IP traffic for IDS monitoring

C. the mls ip ids command applies the IDS ACL to an interface

D. the mls ip ids command processes capture in hardware versus software

E. the mls ip ids command is used with keywords to define interesting traffic

Answer: C

Page 5-45 CSIDS Courseware under Using the mls ip ids command for Catalyst 6500 Traffic capture

1)Create an ACL to capture interesting traffic

2)Select the VLAN interface

3)Apply the ACL to the interface

4)Assign the Sensor's monitoring port as a VACL capture port

Note: The ml sip ids command is used to apply an extended IP access list to the VLAN interface.

Cisco Courseware 5-48

QUESTION 42

Study the exhibit below carefully:

According to the exhibit all switches are connected through Fast Ethernet connections. The Catalyst 4000 is

running Catalyst OS . Sensor ID Certkiller is configured to send TCP resets in response to specific signatures.

Which command argument in the Catalyst 4000's SPAN configuration will allow the switch to receive the TCP

resets sent from Sensor ID Certkiller 3

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 122 123

Brak uwag

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Strona 17