Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Fiche technique

642-531 (CSIDS) TestKing's Cisco Secure Intrusion Detection Systems Version 22.1

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 10 - Cisco router but mistakenly enters the wrong pas

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 100 - applied, they change the version number of a se

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 101 - ftp://[email protected]/ids-k9-sp4.0-2-s29.bin

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 102 - • You must have access to the IDS MC server if

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 103 - - FTP - HTTP/HTTPS - SCP QUESTION NO: 5 Which

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 104 - E. IDSk9-sp-3.1-2-S23-bin –apply F. IDSk9-sp-

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 105 - C. Maintenance partition for the blade D. Ser

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 106 - Note: …what about 4220? For 4220, in this list

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 107 - Topic 9, Describe the Cisco IDS architecture i

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 108 - Answer: E Explanation: [client] --- HTTPS ---

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 109 - QUESTION NO: 5 The new TestKing trainee techn

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 11 - A Cisco IDS Sensor has been configured to detect

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 110 - QUESTION NO: 7 Which Cisco IDS communication

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 111 -  Cisco Secure IDS Director or Cisco Secure PM

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 112 - Explanation: Cisco Courseware 6-4 QUESTION N

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 113 - Section 4: List the Cisco IDS services and th

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 114 - requestor is assigned a cookie containing a use

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 115 - Enter or delete the IP addresses of hosts and n

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 116 - Explanation: Packetd - The packetd daemon inte

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 117 - Topic 10, Monitor a Cisco IDS protection solut

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 118 - D. SSH Answer: A Explanation: To specify th

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 119 - How are IDS device added into IDS Even Viewer?

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 12 - Section 3: Describe the relationship between vu

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 120 - In the Cisco IDS Event Viewer, how do you dis

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 121 - After 1EV has been configured to receive alar

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 122 - Section 6: Perform IEV database administratio

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 123 - QUESTION NO: 2 When enabling time schedules f

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 124 - Topic 11, Manage a large scale deployment of C

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 125 - Explanation: • IDS_Analyzer—To check that the

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 126 - Note: What is the IDS MC? The IDS MC is a web

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 127 - In the Cisco IDS Management Center, what workfl

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 128 - Reference: Cisco IOS Intrusion Detection System

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 129 - Section 5: Use the IDS MC to set up Sensors

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 13 - Section 4: Explain the difference between HIP

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 130 - Section 6: Use the IDS MC to configure Sensor

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 131 - According to the exhibit depicting the RDEP p

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 132 - A. The option increases security of Sensor co

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 133 - What is the purpose of the NAT address field

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 134 - Section 7: Use the IDS MC to configure Sensor l

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 135 - Topic 12, Monitor a large scale deployment of

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 136 - called Watchdog, helps you track the state and

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 137 - Section 3: Monitor IDS devices with the Secur

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 138 - A. events B. sensors C. statistics D. signa

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 139 - Section 4: Administer Security Monitor event r

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 14 - Early intrusion detection wa easily evaded by di

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 140 - A. Data source B. IP fragment reassembly C.

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 141 - Note: VMS Security Monitor (= the Monitoring Ce

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 142 - Answer: B Explanation: Devices using RDEP to

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 143 - - Org ID - Port - Heartbeat Note: …only requir

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 144 - Topic XIII, Simulations (7 questions) This se

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 145 - Answer: login: testking password:testking1636

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 146 - Answer: a. Enter configure terminal mode: s

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 147 - sensor(config-Host-net)# show settings networkP

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 148 - Assignment: Click on the picture of the host

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 149 - You work as network security administrator at t

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 15 - Reference: Cisco Intrusion Detection System - C

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 150 - sensor(config-Host)#networkParams

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 151 - D) Give your trainee Tess King, the daughter o

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 152 - You work as a network security administrator

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 153 - c. Enter network parameters configuration mode:

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 154 - Cisco IDS Paramaters Settings Sensor Host ID

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 155 - E. Sensor IP address - 192.168.1.4/24 Type &q

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 156 - Topic XIV Misc. questions (7 questions) This

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 157 - Answer: Reference: Cisco Courseware 6-4 QU

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 158 - • Schedule, download, and install software upgr

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 159 - C. UDP packets D. ARP packets Answer: A, D

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 16 - Topic 2, Design a Cisco IDS protection solution

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 160 - Topic XV Cisco secure pix firewall questions (

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 161 - Answer: A Explanation: The ca authenticate com

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 162 - QUESTION NO: 5 What command could you use on y

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 163 - D. debug crypto Answer: A Explanation: The d

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 164 - QUESTION NO: 10 Which common command are you

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 165 - Explanation: Two things are required for traff

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 166 - B. The Conduit is where the data travels on th

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 167 - If you wanted to show the running configuration

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 168 - • Archie • Berkeley Standard Distribution (B

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 17 - ANSWER: A, C Cisco Courseware 4-11 (IOS) Cisco

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 18 - C. Network taps D. Router Answer: A Explanat

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 19 - Section 2: Describe the traffic flows for each

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 2 - Important Note, Please Read Carefully Study Tips

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 20 - Answer: D The Sensor is on the same network, so

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 21 - B IDSM2 is limited to 62 signatures C IDSM2 ca

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 22 - Answer: B Cisco Press CCSP Self-Study CSIDS, p

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 23 - What are the two methods used to initially acces

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 24 - Cisco Courseware 12-7 QUESTION NO: 2 Followin

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 25 - filter keyword in monitor session command -----&

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 26 - According to the exhibit Fast Ethernet connect

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 27 - vlans...] [create] Reference: Cisco Coursewar

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 28 - D the mls ip ids command processes capture in h

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 29 - Study the exhibit below carefully: According

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 3 - Table of contents Topic 1, Describe and expla

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 30 - Note: Does the 4000 switch really support VACLs?

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 31 - A. fasthub(config)# monitor session 1 source in

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 32 - B. Map the VLAN access map to a VLAN. C. Use c

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 33 - Refer to the exhibit. All switches are connect

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 34 - set security acl ip acl_name permit tcp src_ip_s

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 35 - Answer: Explanation:  Ingress SPAN copies ne

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 36 - Topic 3, Identify the Cisco IDS Sensor platform

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 37 - Which sensor appliance does not support the conn

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 38 - Topic 4, Install and configure a Cisco IDS Sens

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 39 - Answer: D Page 8-8 CSIDS Courseware under IDSM

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 4 - Section 2: Configure a signature's enable st

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 40 - QUESTION NO: 4 Which user account is used to l

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 41 - Events can be retrieved through the Sensor’s web

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 42 - Cisco Courseware 9-40 QUESTION NO: 3 Network

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 43 - QUESTION NO: 4 Network topology exhibit/simulati

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 44 - QUESTION NO: 5 Network topology exhibit/simulati

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 45 - A. Not logging alarms, commands, and errors. B

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 46 - Postofficed The postofficed daemon serves as the

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 47 - NRS-2E IDS 3.0 and IDS 3.1 NRS-2FE IDS 3.0 and

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 48 - I am not sure about this question. The latest c

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 49 - Section 6: Obtain management access on the Sens

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 5 - Section 2: Install the IDS MC (0 questions)...

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 50 - Cisco Courseware 7-22, 7-23 QUESTION NO: 3 Wh

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 51 - QUESTION NO: 5 A company policy states that IDS

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 52 - Section 7: Initialize the Sensor (2 questions)

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 53 - Explanation: The interface sensing configuratio

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 54 - A. IDS event Viewer B. Cisco ConfigMaker C. C

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 55 -  cidServer version – If you are having difficu

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 56 - • Operators—This user role has the second highe

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 57 - E Guest Answer: A Privileges: Allowed levels

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 58 - D. "tls generate-key" command generat

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 59 - Section 13: Configure Sensor logging propertie

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 6 - Topic 1, Describe and explain the various intrus

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 60 - Section 14: Perform a configuration backup vi

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 61 - D. Manually enter the correct software version

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 62 - Reference: Cisco Courseware 12-3 QUESTION NO: 4

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 63 - QUESTION NO: 6 Which of the following options ar

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 64 - Section 16: Sensor Communications Sensor Logg

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 65 - The sensor compares the list of signatures with

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 66 - Topic 5: Tune and customize Cisco IDS signature

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 67 - The goal of defining these reassembly settings i

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 68 - ANSWER: C, D, E QUESTION NO: 2 How do you co

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 69 - QUESTION NO: 2 What information can a network se

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 7 - QUESTION NO: 2 Which of the following types of a

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 70 - Section 4: Tune a signature to perform optimally

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 71 - Answer: B FireAll is default. AlamInterval doe

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 72 - A. ATOMIC.IPOPTIONS B. SERVICE.MSSQL C. SERV

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 73 - Topic 6, Configure a Cisco IDS Sensor to perfor

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 74 - QUESTION NO: 3 Which of the following Cisco IDS

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 75 - The blocking device must have one of the followi

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 76 - Section 2: Design a Cisco IDS solution using t

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 77 - B. ACL applied to the internal (trusted) interf

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 78 - C. Router runs the packet against ACL, tags it

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 79 - Which type of ACL is allowed when implementing t

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 8 - QUESTION NO: 4 Which of the following is typic

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 80 - Answer: B Explanation: PIX Firewall You can

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 81 - Cisco Courseware 15-30 QUESTION NO: 2 Which o

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 82 - Blocking with Multiple Sensors Multiple sensors

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 83 - Course ver 4.0 page 6-4 CtlTransSource allows se

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 84 - Topic 7, Describe the Cisco IDS signatures and

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 85 - Answer: B Cisco Courseware 13-41 QUESTION NO

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 86 - QUESTION NO: 5 Which Cisco IDS signatures are

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 87 - Answer: Reference: Cisco Secure Intrusion

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 88 - Answer: C Signature Structure As previously dis

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 89 - Given the following signature engines, which wou

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 9 - An individual sensor contains two separate interf

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 90 - Answer: C Explanation: SERVICE.* Engines Use th

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 91 - Which statement is true when creating custom sig

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 92 - E. String.UDP Answer: E (or D) Note: I am not

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 93 - Answer: C Explanation: Protected—The protected

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 94 -  Log  Reset  ShunHost  ShunConnection 

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 95 - Answer: C, E Explanation: Both Regex and Service

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 96 - Answer: C E Explanation: Engine parameters

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 97 - Reference: Working With Signature Engines Q

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 98 - Reference: Cisco Secure Intrusion Detection Sys

642 -531 Leading the way in IT testing and certification tools, www.testking.com - 99 - Topic 8, Perform maintenance operations such as