Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Pobierz pdf (Strona 95)

642-531

C. If not selected, the option specifies that IDS MC will dynamically generate new keys to securely

communicate with the Sensor.

D. The option increases security of Sensor communications by requiring the use of both username/password

and SSH authentication.

E. The option increases performance, but decreases security of Sensor communications by replacing username

and password authentication with a single pre-shared key.

Answer: A

Reference Cisco Press CCSP 2nd Edition, Chapter 10 Page 290, Last Paragraph

QUESTION 222

The new Certkiller trainee technician wants to know what version of SSH is used by the Sensor for IDS

MC access.What would your reply be?

A. SSH1

B. SSH2

C. SSH3

D. SSH1 or SSH2

E. SSH2 or SSH3

Answer: A

Page 294 Cisco Press CCSP 2nd Edition under Sensor Configuration

Although you can connect to the sensor using both RSA (SSH version 1) and DSA (SSH version 2), the sensor

communicates with other devices using only RSA keys (SSH version 1)

QUESTION 223

Exhibit:

What is the purpose of the NAT address field in the graphic?

A. Informs Monitoring Center for Security which address to use in order to access an IDS device located behind

1 2 ... 90 91 92 93 94 95 96 97 98 99 100 ... 122 123

Brak uwag

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Strona 95