CCNP Security VPN FAQ: Configuring Cisco VPN 3000 for Remote Access Using Preshared Keys Question. What methods can you use for user authentication on the Cisco VPN 3000 Series Concentrators? Answer: You can configure the VPN concentrators to use RADIUS, NT Domain, Security Dynamics International (SDI), and internal user authentication. Question. What methods can you use … [Read more...]
CCNP Secure IPS FAQ: Sensor Tuning
CCNP Secure IPS FAQ: Sensor Tuning Q1. Which of the following is not an example of an IDS evasion technique? A. Sending overlapping fragments B. Generating a flood of alarms C. Manipulating packet TTL values D. Sending attack traffic in an SSH session E. Sending attack traffic in a Telnet session Answer: E Q2. Which of the following is not an obfuscation method? A. … [Read more...]
CCNP Secure IPS FAQ: Advanced Signature Configuration
CCNP Secure IPS FAQ: Advanced Signature Configuration Q1. Which signature field indicates the likelihood that the signature will trigger on attack traffic? A. Alert Severity B. Signature Fidelity Rating C. Target Value Rating D. Event Action Override E. Alert Notes Answer: B Q2. Which of the following is not a valid value for the Event Count Key field? A. Attacker … [Read more...]
CCNP Security VPN FAQ: Cisco VPN 3000 LAN-to-LAN with Preshared Keys
CCNP Security VPN FAQ: Cisco VPN 3000 LAN-to-LAN with Preshared Keys Q1. What is a LAN-to-LAN connection? Answer: A LAN-to-LAN connection is a secure connection between two LANs. Q2. What equipment is required for a LAN-to-LAN connection? Answer: A LAN-to-LAN connection requires any combination of concentrators, routers and firewalls. Q3. Where can a LAN-to-LAN … [Read more...]
CCNP Security VPN FAQ: Configuring Scalability Features of the VPN 3002 Hardware Client
CCNP Security VPN FAQ: Configuring Scalability Features of the VPN 3002 Hardware Client Q1. What are the ramifications an administrator should consider when planning to use Virtual Router Redundancy Protocol (VRRP) along with reverse route injection (RRI)? Answer: VRRP (Virtual Router Redundancy Protocol) and RRI (Reverse Route Injection) are incompatible and should not be … [Read more...]
CCNP Security VPN FAQ: Cisco VPN 3000 Concentrator Series Hardware Overview
CCNP Security VPN FAQ: Cisco VPN 3000 Concentrator Series Hardware Overview Question. What models are available in the Cisco VPN 3000 Concentrator Series? Answer: Five models are available in the Cisco VPN 3000 Concentrator Series: VPN 3005, VPN 3015, VPN 3030, VPN 3060, and VPN 3080. Question. What is the maximum number of simultaneous sessions that can be supported on … [Read more...]
CCNP Secure IPS FAQ: Cisco IPS Signature Engines
CCNP Secure IPS FAQ: Cisco IPS Signature Engines Q1. Which signature engine would you use to create a signature that searches for the pattern "Confidential" in a single packet? A. Atomic IP B. String TCP C. Meta D. AIC FTP E. Service Generic Answer: A Q2. Which signature engine would you use to create a signature that will trigger when the following three HTTP … [Read more...]
CCNP Secure IPS FAQ: Basic Cisco IPS Signature Configuration
CCNP Secure IPS FAQ: Basic Cisco IPS Signature Configuration Q1. Which of the following is not a valid IDM signature group? A. Attack B. Operating System C. Service D. Signature Release E. Policy Violation Answer: E Q2. Which of the following is not a valid signature response option? A. Deny Victim Inline B. Deny Attacker Inline C. Produce Alert D. Request SNMP … [Read more...]
CCNP Security VPN FAQ: Configuring Cisco 3002 Hardware Client for Remote Access
CCNP Security VPN FAQ: Configuring Cisco 3002 Hardware Client for Remote Access Q1. What screen is used on the head-end concentrator to demand the use of preshared keys? Answer: The Configuration | System | Tunneling Protocols | IPSec LAN-to-LAN | Modify screen is used to demand preshared keys from a VPN 3000 Series Concentrator. Q2. You need to allow the main office to … [Read more...]
CCNP Secure IPS FAQ: Basic Sensor Configuration
CCNP Secure IPS FAQ: Basic Sensor Configuration Q1. Which of the following is a valid user role on the sensor? A. Operator B. Analyst C. Guest D. System E. Manager Answer: A Q2. Which of the following parameters cannot be configured when you are editing a monitoring interface via IDM? A. Interface Duplex B. Interface Speed C. Alternate TCP Reset Interface D. … [Read more...]