What is the purpose of using a span or monitor port on a switch? A. to aggregate traffic from multiple switch ports B. to tap data off network media C. to overcome problems that switches have in accurately reproducing desired…
Which IPS placement option is the noisiest? A. inside the firewall B. outside the firewall C. inside the DMZ D. inside general user segments
An IPS addresses evasion by implementing countermeasures. What is one such countermeasure? A. periodically reset statistical buckets to zero for memory utilization, maximization, and performance B. send packets to the origination host of a given communication session, to confirm or…
Which technique can an intruder use to try to evade detection by a Snort sensor? A. exceed the maximum number of fragments that a sensor can evaluate B. split the malicious payload over several fragments to mask the attack signature…
Which version of libpcap does DAQ require? A. 0.9.8 or later B. 1.0.0 or later C. any version D. none
Which statement about implementing DAQ is true? A. It is a shell script that works on any Linux platform. B. It must be compiled separately. C. You must obtain it from Sourceforge. D. It is not open source.
In the IP addressing scheme of your organization, each subnet consists of 4096 hosts, and the beginning of the addressing scheme is 172.16.0.0. Your remote office is allocated the range of addresses from the first subnet. What are the CIDR…
When building a platform for a Snort installation, which set of components is a major security concern? A. IP address, mask, and gateway settings B. host naming conventions C. URL feed vendors D. default accounts and settings
Which two features of Cisco ISE contribute to guest access management? (Choose two.) A. employee-sponsored network access B. faster device onboarding C. guest access and activity tracking D. accelerated security options E. site-to-site VPNs F. clientless network access
Which Cisco Identity Services Engine feature controls access and policies for campuses and branches, wired and wireless devices, and guests, from a single location? A. centralized policy management B. compliance C. URL filtering D. SSL decryption E. extensive BYOD support