Question 2: Self Test Software Practice Test

Posted on
Share on Google+Share on LinkedInShare on FacebookShare on RedditTweet about this on TwitterEmail this to someone

2) Objective: Configure Cisco IOS Firewall features to meet security requirements
SubObjective: Identify and describe the capabilities of the IOS firewall feature set

 

Single Answer, Multiple Choice

 

Which function is NOT supported by a Cisco IOS IPS?

 

A. extended ACL support
B. parallel signature scanning
C. expanded signature capability
D. configuring signature action through CLI

 

Answer:
D. configuring signature action through CLI

 

Tutorial:
Actions that a signature takes when it encounters a match in the packet are no longer configurable from the Command Line Interface (CLI). All signatures are now available with preconfigured actions to counter the attacks. In earlier versions, it was possible to define the action corresponding to a signature. For example, the TCP connection could be reset through CLI.

 

All the other options are incorrect because Cisco IOS IPS supports both standard and named or numbered Access Control Lists (ACL).

 

Cisco IOS IPS also supports parallel signature scanning. The signatures are scanned in parallel by a single micro-engine. This speeds up the detection and prevention of attacks.

 

New signatures can also be added to the existing Signature Definition File (SDF) without an upgrade of IOS image, thus expending the signature capability.

 

Reference:
CCSP SNRS Exam Certification Guide, Chapter 13: Cisco IOS Intrusion Prevention System, Cisco IOS IPS Features, pp. 259-260.

 

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804453cf.html#wp1162842

Share on Google+Share on LinkedInShare on FacebookShare on RedditTweet about this on TwitterEmail this to someone
cmadmin

ABOUT THE AUTHOR

Posted in Archive|

Comment:

Leave a comment

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>