tailieunhanh - ccsp csi exam certification guide phần 6

Bộ cảm biến hình NIDS NIDS, HIDS NIDS, HIDS giảm nhẹ Màn hình lưu lượng truy cập từ các đối tác Bảo vệ các hệ thống nội bộ quan trọng và dữ liệu Bảo vệ chống lại các mối đe dọa từ các mạng công cộng không đáng tin cậy, bao gồm phân khúc dịch vụ công cho các máy chủ web, vv cứng chu vi | 170 Chapter 11 Cisco Perimeter Security Products Table 11-12 describes some common IDS deployment areas. Table 11-12 Common IDS Deployment Areas Deployment Area Sensor Type Mitigation Extranets NIDS Monitors traffic from partners Intranets internal NIDS HIDS Protects internal critical systems and data Internet access NIDS HIDS Protects against threats from untrusted public networks includes public services segment for web servers etc. Remote access NIDS Hardens perimeter Q A 171 Q A As mentioned in the introduction All About the Cisco Certified Security Professional Certification you have two choices for review questions. The questions that follow next give you a bigger challenge than the exam itself by using an open-ended question format. By reviewing now with this more difficult question format you can exercise your memory better and prove your conceptual and factual knowledge of this chapter. The answers to these questions are found in Appendix A. For more practice with exam-like question formats including questions using a router simulator and multiple choice questions use the exam engine on the CD-ROM. 1. Define IDS. 2. What protocol do Cisco Secure IDS devices use to communicate with each other 3. Traditionally what devices provided perimeter security 4. What are the three types of responses that a sensor can perform in reply to an attack 5. What are the perimeter security features provided by a Cisco router 6. Define a perimeter. 7. Network sensing attack response and device management are functions of what device 8. What is the Cisco Secure Scanner 9. Define stateful packet filtering. 10. Describe the two versions of Cisco Secure HIDS that are available. This chapter covers the following topics Secure Connectivity Identity Management Cisco Secure Access Control Server Security Management Cisco AVVID Design .