网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
Which statement about IDS/IPS design is correct?（）
- A、An IPS should be deployed if the security policy does not support the denial of traffic.
- B、An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.
- C、An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.
- D、Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
参考答案
更多 “Which statement about IDS/IPS design is correct?（）A、An IPS should be deployed if the security policy does not support the denial of traffic.B、An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C、An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.D、Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.” 相关考题
考题
Which statement about IDS／IPS design is correct?()
A. An IPS should be deployed if the security policy does not support the denial of traffic.B. An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C. An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.D. Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
考题
With which three tasks does the IPS Policies Wizard help you？ （）A、Selecting the interface to which the IPS rule will be appliedB、Selecting the Signature Definition File （SDF） that the router will useC、Selecting the direction of traffic that will be inspectedD、Selecting the inspection policy that will be applied to the interface
考题
IPS与IDS的区别是（）A、IDS是1种检测技术，IPS是一种阻断技术B、IDS并联在网络上的设备，IPS是串接在网络上的设备C、IPS属于审计类产品；IDS属于访问控制类产品D、IPS会检测并主动防御。而IDS却只会检测然后交由防火墙处理
考题
As a critical part of the design for the Enterprise Campus network， which of the following two aretrue concerning intrusion detection and prevention solution？ （）A、 IDS is capable of both inline and promiscuous monitoring， while IPS is only capable ofpromiscuous monitoringB、 IDS will stop malicious traffic from reaching its intended target for certain types of attacks.C、 IPS processes information on Layer 3 and 4 as well as analyzing the contents and payload ofthe packets for more sophisticated embedded attacks （Layers 3 to 7）D、 IPS inspects traffic statefully and needs to see both sides of the connection to function properlyE、 IDS placement at the perimeter of Data Center outside the firewall generates many warningsthat have relatively low value because no action is likely to be taken on this information
考题
Which statement describes the behavior of a security policy？（）A、The implicit default security policy permits all traffic.B、Traffic destined to the device itself always requires a security policy.C、Traffic destined to the device’s incoming interface does not require a security policy.D、The factory-default configuration permits all traffic from all interfaces.
考题
下列关于IPS的说法中，错误的是（）。A、IPS一般以在线方式部署在网络关键路径B、IPS是一种基于应用层检测的设备C、IPS区别于IDS的重要一点是IPS可以主动防御攻击D、IPS天然可以防范所有大的攻击，不需要升级特征库
考题
关于IDS和IPS，说法正确的是（）A、IDS部署在网络边界，IPS部署在网络内部B、IDS适用于加密和交换环境，IPS不适用C、用户需要IDS日志定期查看，IPS不需要D、IDS部署在网络内部，IPS部署在网络边界
考题
Which statement about an IPS is true？（）A、The IPS is in the traffic path.B、Only one active interface is required.C、Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.D、When malicious traffic is detected，the IPS will only send an alert to a management station.
考题
Which two statements describe the functions and operations of IDS and IPS systems？（）A、A network administrator entering a wrong password would generate a true-negative alarm.B、A false positive alarm is generated when an IDS/IPS signature is correctly identified.C、An IDS is significantly more advanced over IPS because of its ability to prevent network attacks.D、Cisco IDS works inline and stops attacks before they enter the network.E、Cisco IPS taps the network traffic and responds after an attack.F、Profile-based intrusion detection is also known as "anomaly detection".
考题
Which key method is used to detect and prevent attacks by use of IDS and/or IPS technologies？（）A、Signature-based detectionB、Anomaly-based detectionC、Honey pot detectionD、Policy-based detection
考题
IDS和IPS的区别：（）A、IDS和IPS的功能上没有区别，只是习惯性的叫法不同。B、IDS可以分析出网络中可能存在的攻击并报警，但不能阻断攻击。C、通常情况下IPS在网络的拓扑结构中属于旁路设备，而IDS和其他网络设备串联。D、IDS具有防火墙的功能。
考题
多选题IPS与IDS的区别是（）AIDS是1种检测技术，IPS是一种阻断技术BIDS并联在网络上的设备，IPS是串接在网络上的设备CIPS属于审计类产品；IDS属于访问控制类产品DIPS会检测并主动防御。而IDS却只会检测然后交由防火墙处理
考题
单选题Which statement about an IPS is true？（）A
The IPS is in the traffic path.B
Only one active interface is required.C
Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.D
When malicious traffic is detected，the IPS will only send an alert to a management station.
考题
单选题Which statement about IDS/IPS design is correct？（）A
An IPS should be deployed if the security policy does not support the denial of traffic.B
An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C
An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.D
Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
考题
单选题Which statement about IDS/IPS design is correct?（）A
An IPS should be deployed if the security policy does not support the denial of traffic.B
An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.C
An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.D
Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
考题
判断题IPS与IDS的职责都是保证网络安全，IPS注重接入控制，而IDS则进行网络监测。A
对B
错
热门标签
最新试卷