Datasheet

642 -531
Leading the way in IT testing and certification tools, www.testking.com
- 69 -
QUESTION NO: 2
What information can a network security administrator specify in a Cisco IDS exclude
signature filter? (Choose two)
A. Signature name
B. Signature ID
C. Signature action
D. Signature severity level
E. Sub-signature ID
F. Source port
Answer: B, E
Explanation:
When defining a simple filter, you need to configure the following fields:
 Signature
 Subsignature
 IP address
 Network Mask
 Address Role
Reference: Cisco Secure Intrusion Detection System (Ciscopress) page 446
QUESTION NO: 3
What information can a network security administrator specify in a Cisco IDS signature
filter? (Choose three)
A. Source port
B. Source address
C. Destination address
D. Destination port
E. Signature ID
Answer: B, C, E
Explanation: A filter is defined by specifying the signature, the source address, and the
destination address and whether it is an inclusive or exclusive filter.
Reference: CiscoWorks Management Center for IDS Sensors - Tuning Sensor
Configurations