CCNA Security v2.0 Chapter 5 Simulator Exam Online

What information must an IPS track in order to detect attacks matching a composite signature?

What is a disadvantage of a pattern-based detection mechanism?

What is the purpose in configuring an IOS IPS crypto key when enabling IOS IPS on a Cisco router?

Refer to the exhibit. What is the result of issuing the Cisco IOS IPS commands on router R1?

Which two benefits does the IPS version 5.x signature format provide over the version 4.x signature format? (Choose two.)

Which type of IPS signature detection is used to distract and confuse attackers?

Which statement is true about an atomic alert that is generated by an IPS?

A system analyst is configuring and tuning a recently deployed IPS appliance. By examining the IPS alarm log, the analyst notices that the IPS does not generate alarms for a few known attack packets. Which term describes the lack of alarms by the IPS?

A security specialist configures an IPS so that it will generate an alert when an attack is first detected. Alerts for the subsequent detection of the same attack are suppressed for a pre-defined period of time. Another alert will be generated at the end of the period indicating the number of the attack detected. Which IPS alert monitoring mechanism is configured?

In configuring a Cisco router to prepare for IPS and VPN features, a network administrator opens the file realm-cisco.pub.key.txt, and copies and pastes the contents to the router at the global configuration prompt. What is the result after this configuration step?

Refer to the exhibit. Based on the configuration, which traffic will be examined by the IPS that is configured on router R1?

Refer to the exhibit. Based on the IPS configuration provided, which conclusion can be drawn?

A network administrator is configuring an IOS IPS with the command

R1(config)# ip ips signature-definition

Which configuration task can be achieved with this command?

What are two disadvantages of using an IDS? (Choose two.)

What are two shared characteristics of the IDS and the IPS? (Choose two.)

Refer to the exhibit. A network administrator enters the command on a Cisco IOS IPS router. What is the effect?

A network administrator suspects the default setting of the ip ips notify sdee command has caused performance degradation on the Cisco IOS IPS router. The network administrator enters the ip sdee events 50 command in an attempt to remedy the performance issues. What is the immediate effect of this command?

True or False?

A Cisco IDS does not affect the flow of traffic when it operates in promiscuous mode

What is a required condition to enable IPS activity reporting using the SDEE format?

Refer to the exhibit. Which statement best describes how incoming traffic on serial 0/0 is handled?

What is a disadvantage of network-based IPS as compared to host-based IPS?

An IPS sensor has detected the string confidential across multiple packets in a TCP session. Which type of signature trigger and signature type does this describe?

What are two drawbacks to using HIPS? (Choose two.)