Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Fiche technique télécharger pdf (Page 63)

642-531

C. ATOMIC.IP.ROUTING

D. OTHER

E. ATOMIC.IPOPTIONS

Answer: B

Explanation:

ATOMIC.L3.IPis a general-purpose Layer 3 inspector. It can handle DataLength and Protocol Number

comparisons. It also has some hooks for fragment and partial ICMP comparisons. None of the parameters are

required, so a simple signature meaning "any IP packet" can be written.

Reference:Cisco Courseware 13-33

QUESTION 147

Given the following signature engines, which would represent the most appropriate choice when creating a

intruder detecting signature that scans for open port number 80 using stealth scanning techniques?

A. ATOMIC.TCP

B. SERVICE.TCP.HTTP

C. ATOMIC.IPORTIONS

D. SERVICE.HTTP

Answer: A

Explanation:

Reference:Cisco Courseware 13-34

1 2 ... 58 59 60 61 62 63 64 65 66 67 68 ... 122 123

Pas de commentaire

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Fiche technique Page 63