CCIE系列认证
多选题An IPS sensor with3 sniffing interfaces can be configuredas： （）A3 promiscuous sensorsB3 inline sensorsC1 inline sensor， 1 promiscuous sensorD2 inline sensors， 1 promiscuous sensors
题目
3 promiscuous sensors
3 inline sensors
1 inline sensor， 1 promiscuous sensor
2 inline sensors， 1 promiscuous sensors
相似问题和答案
第1题：
Cisco IDS sensors form the eyes and ears of your Cisco network intrusion detection system.Placing sensors correctly throughout your network is crucial to successfully implementing your Cisco intrusion detection system . Where can an IPS sensor be placed in an enterprise network?（）
A. core layer
B. bridging two VLANs on one switch
C. between two Layer 2 devices withtrunking
D. between two Layer 2 devices withouttrunking
第2题：
As a critical part of the design for the Enterprise Campus network， which of the following two aretrue concerning intrusion detection and prevention solution？ （）
- A、 IDS is capable of both inline and promiscuous monitoring， while IPS is only capable ofpromiscuous monitoring
- B、 IDS will stop malicious traffic from reaching its intended target for certain types of attacks.
- C、 IPS processes information on Layer 3 and 4 as well as analyzing the contents and payload ofthe packets for more sophisticated embedded attacks （Layers 3 to 7）
- D、 IPS inspects traffic statefully and needs to see both sides of the connection to function properly
- E、 IDS placement at the perimeter of Data Center outside the firewall generates many warningsthat have relatively low value because no action is likely to be taken on this information
正确答案:C,E
第3题：
A. the use of rowid
B. a GROUP BY clause
C. an ORDER BY clause
D. only an inline view
E. an inline view and an outer query
第4题：
Why does L4TM require T1 to be in promiscuous mode？（）
- A、to process traffic that is not intended for its MAC address
- B、to transmit TCP reset packets
- C、to bind with other promiscuous mode ports
- D、to receive Ethernet broadcasts
正确答案:A
第5题：
An IPS sensor with3 sniffing interfaces can be configuredas： （）
- A、 3 promiscuous sensors
- B、 3 inline sensors
- C、 1 inline sensor， 1 promiscuous sensor
- D、 2 inline sensors， 1 promiscuous sensors
正确答案:A,C
第6题：
Promiscuous mode混杂模式
正确答案: 与共享网络连接的计算机捕捉所有包，包括其它的计算机指定的包的模式。混杂模式对网络监控是有用的，但会给网络客户易带来安全危机，许多标准接口容许混杂模式。
第7题：
Cisco IDS sensors form the eyes and ears of your Cisco network intrusion detection system.Placing sensors correctly throughout your network is crucial to successfully implementing your Cisco intrusion detection system . Where can an IPS sensor be placed in an enterprise network?（）
- A、core layer
- B、bridging two VLANs on one switch
- C、between two Layer 2 devices withtrunking
- D、between two Layer 2 devices withouttrunking
正确答案:C,D
第8题：
Your corporate security policy requires that a user performing attacks must have limited network access and activities until an administrator can investigate.In the admin GUI, which sensor event policy action must you configure in "Configuration" >"Sensors" >"Sensor Event Policies" >[rule name] to accomplish this?（）
A. Ignore
B. Replace users role
C. Terminate user session
D. Disable user account
第9题：
Which two of these are characteristics of an IDS sensor？（）
- A、passively listens to network traffic
- B、is an active device in the traffic path
- C、has a permissive interface that is used to monitor networks
- D、traffic arrives on one IDS interface and exits on another
- E、has a promiscuous interface that is used to monitor the network
正确答案:A,E
第10题：
Which is the main difference between host-based and network-based intrusion prevention？（）
- A、Host-based IPS can work in promiscuous mode or inline mode.
- B、Network-based IPS can provide protection to desktops and servers without the need of installing specialized software on the end hosts and servers.
- C、Network-based IPS is better suited for inspection of SSL and TLS encrypted data flows.
- D、Host-based IPS deployment requires less planning than network-based IPS.
正确答案:B