Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Pobierz pdf (Strona 18)

642-531

A. rx

B. both

C. ingress

D. tcp-rst accept

E. inpkts enable

F. This feature is not supported in this configuration

Answer: E

IDS course 4.0 page 5-19 Keyworks to enable the receiving of normal inbound traffic in the SPAN destination

port.

QUESTION 43

Study the exhibit below carefully:

According to the exhibit all switches are connected through Fast Ethernet connections. Server Certkiller 7

and Sensor ID Certkiller 7 are in the same VLAN.

Which of the following commands represents a valid configuration step to permit Sensor ID Certkiller 7 to

monitor traffic sent from Server Certkiller 7?

A. 3500xl(config)#monitor session 1 source interface fastEthernet 0/5 tx

B. 3500xl(config-if)#port monitor fastEthernet 0/5

C. 3500xl>(enable)set span 0/5 0/24 both

D. 3500xl(config)#monitor session 1 source interface fastEthernet 0/5 rx

E. 3500xl>(enable)set span 0/24 0/5 rx create

F. No SPAN configuration is required since both devices are in the same VLAN

Answer: B

Catalyst 2900XL / 3500XL

1. port monitor [interface | vlan]

Note: D would be correct for 3550 switches, but not for 3500XL

Cisco Courseware 5-14

QUESTION 44

Which of the following represents the basic steps in the configuration of VACLs for traffic capture on a

Catalyst 4000 switch running Catalyst OS. (Choose two.)

A. map the VACL to the capture port

B. assign ports to receive capture traffic

C. define an access-group for interesting traffic

D. commit the VACL to memory

E. create action clause to capture traffic

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 122 123

Brak uwag

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Strona 18