642-825 Implementing Secure Converged Wide Area Networks Practice Exam

Cisco ™

642-825 Implementing Secure Converged Wide Area Networks

Note 1: 642-825 Exhibit and all related diagrams are not shown in demo questions.
Note 2: 642-825 Answers are not shown in demo questions.
Exhibits and Answers are only provided in the Full Version.

Demo Question 1.

A new Cisco IPS device was just installed in the EliteCertify network. When packets in a session match a signature, what are three actions that the Cisco IOS Firewall IPS can take? (Select three)

A. Drop the packets
B. Send an alarm to a syslog server
C. Reset the connection
D. Notify a centralized management interface of a false positive
E. Use the signature micro-engine to prevent a CAM Table Overflow Attack
F. Remove the virus or worm from the packets and forward the packet through

Display Answer

Purchase Full Version:

642-825 Printable PDF Prep Guide $49.95 BUY NOW!

642-825 Test Simulation Engine $69.95 BUY NOW!

642-825 PDF & Test Simulation Engine $99.95 BUY NOW!

Answer: A, B, C

Explanation: When a signature is matched, the IPS responds in real time, before network security can be compromised, and logs the event through Cisco IOS syslog messages or SDEE. You can configure IPS to choose the appropriate response to various threats. When packets in a session match a signature, IPS can take any of these actions, as appropriate: 1. Send an alarm to a syslog server or a centralized management interface. This action is typically combined with other preventive actions. 1. Drop the packet. This action is effective for all IP protocols and does not affect any legitimate user if the source IP address was spoofed. 2. Reset the connection. This action works only for TCP sessions.