Which option is an example of network reconnaissance attack?
Which statement about Cisco IPS signatures is true?
All of the built-in signatures are enabled by default.
Tuned signatures are built-in signatures whose parameters cannot be adjusted.
Once the signature is removed from the sensing engine it cannot be restored.
It is recommended to retire a signature not being used to enhance the sensor performance.
The class sets the resource maximum limit for a context to which it belongs.
A resource cannot be oversubscribed or set to be unlimited in the class.
The resource limit can only be set as a percentage in the class and not as an absolute value.
Context belongs to a default class if not assigned to any other class.
The default class provides unlimited access for all the resources.
Event Action Rule is a component of which IPS application?
For what reason is BVI required in the Transparent Cisco IOS Firewall?
BVI is required if more than two interfaces are in the same bridge group.
BVI cannot be used to manage the device.
Traffic is classified using the destination address of the packet using the connection table.
Traffic is classified using the destination address of the packet using the NAT table.
Traffic is classified using the destination address of the packet using the routing table.
Traffic is classified by copying and sending the packet to all the contexts.
Traffic is classified using the destination MAC address of the packet.
Which Cisco IPS appliance signature engine inspects IPv6 Layer 3 traffic?
Which statement about the TACACS+ AV pair is true?
AV pair value is integer.
Cisco ACS does not support accounting AV pairs.
AV pair values could be both strings and integers.
AV pair does not have value type.
In Cisco IOS firewall the HTTP inspection engine has the ability to protect against which of the following?
HTTP file transfers authorized by the configured security policy.
Which statement correctly describes a category for the ASA Botnet Traffic Filter feature?
Unlisted addresses: The addresses are malware addresses that are not identified by the dynamic database and are hence defined statically.
Ambiguous addresses: In this case, the same domain name has multiple malware addresses. These addresses are on the graylist.
Known malware addresses: These addresses are identified as blacklist addresses in the dynamic database and static list.
Known allowed addresses: These addresses are identified as whitelist addresses that are bad addresses but still allowed.