单项选择题

What is the main reason for using the "ip ips deny-action ips-interface" IOS command？（）

A. To selectively apply drop actions to specific interfaces
B. To enable IOS to droptraffic for signatures configured with the Drop action
C. To support load-balancing configurations in which traffic can arrive via multipleinterfaces
D. This is nota valid IOS command

点击查看答案

上一题目录下一题

相关考题

多项选择题

Which of the following is true about the Cisco IOS-IPS functionality？（）

A. The signatures available are built into the IOS code.
B. Toupdate signatures youneed to install a new IOS image
C. To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
D. Loading and enabling selected IPS signatures is user configurable
E. Cisco IOS onlyprovides Intrusion Detection functionality
F. Cisco IOS-IPS requires a network module installed in your router running sensor software

单项选择题

What is true about a Pre-Block ACLconfigured when setting up your sensor toperform IP Blocking？（）

A. The Pre-Block ACL is overwritten when a blockingaction is initiatied by the sensor
B. The blocking ACL entries generated by the sensor override the Pre-Block ACL entries
C. The Pre-Block ACL entries override the blocking ACL entries generated by the sensor
D. The Pre-Block ACL is replaced by the Post-Block ACL when a blocking actionis initiated bythe sensor
E. You can not configure a Pre-Block ACL when configuring IP Blockingon your sensor

多项选择题

Which two IP multicast addresses belong to the group represented by the MAC address of 0x01-00-5E-15-6A-2C？（）

A. 224.21.106.44
B. 224.25.106.44
C. 233.149.106.44
D. 236.25.106.44
E. 239.153.106.44