210-260 Exam Dumps | What are two challenges when deploying host-level IPS? (Choose two.)

Home
Cisco
Implementing Cisco Network Security
Cisco.210-260.v2019-07-08.q177
Question 137

Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:

Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 137/177

What are two challenges when deploying host-level IPS? (Choose two.)

A. It is unable to determine the outcome of every attack that it detects.

B. It is unable to provide a complete network picture of an attack.

C. The deployment must support multiple operating systems.

D. It does not provide protection for offsite computers.

E. It is unable to detect fragmentation attacks.

Correct Answer: B,C

Explanation/Reference:
Explanation:
Advantages of HIPS: The success or failure of an attack can be readily determined. A network IPS sends
an alarm upon the presence of intrusive activity but cannot always ascertain the success or failure of such
an attack. HIPS does not have to worry about fragmentation attacks or variable Time to Live (TTL) attacks
because the host stack takes care of these issues. If the network traffic stream is encrypted, HIPS has
access to the traffic in unencrypted form.
Limitations of HIPS:
There are two major drawbacks to HIPS:
+ HIPS does not provide a complete network picture: Because HIPS examines information only at the local
host level, HIPS has difficulty constructing an accurate network picture or coordinating the events
happening across the entire network. + HIPS has a requirement to support multiple operating systems:
HIPS needs to run on every system in the network. This requires verifying support for all the different
operating systems used in your network.
Reference: http://www.ciscopress.com/articles/article.asp?p=1336425&seqNum=3

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (177q): Question 1: Which feature of the Cisco Email Security Appliance can miti...; Question 2: What are two default Cisco IOS privilege levels? (Choose two...; Question 3: Which type of malicious software can create a back-door into...; Question 4: Which statement about zone-based firewall configuration is t...; Question 5: Which cloud-based security service from Cisco provides URL f...; Question 6: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 7: Which two events would cause the state table of a stateful f...; Question 8: On an ASA, which maps are used to identify traffic?...; Question 9: Which command do you enter to verify that a VPN connection i...; Question 10: How is management traffic isolated on a Cisco ASR 1002?...; Question 11: Which protocol offers data integrity, encryption, authentica...; Question 12: Which action does standard antivirus software perform as par...; Question 13: Which IDS/IPS solution can monitor system processes and reso...; Question 14: What are two challenges of using a network-based IPS? (Choos...; Question 15: When is the default deny all policy an exception in zone-bas...; Question 16: A proxy firewall protects against which type of attack?...; Question 17: Which command do you enter to enable authentication for OSPF...; Question 18: Which description of the use of a private key is true?...; Question 19: Referencing the CIA model, in which scenario is a hash-only ...; Question 20: Which IDS/IPS state misidentifies acceptable behavior as an ...; Question 21: What features can protect the data plane? (Choose three.)...; Question 22: Which IPS mode provides the maximum number of actions?...; Question 23: Which type of mirroring does SPAN technology perform?...; Question 24: Which statements about smart tunnels on a Cisco firewall are...; Question 25: How does a zone pair handle traffic if the policy definition...; Question 26: What improvement does EAP-FASTv2 provide over EAP-FAST?...; Question 27: Which command successfully creates an administrative user wi...; Question 28: Which source port does IKE use when NAT has been detected be...; Question 29: Which command will configure a Cisco ASA firewall to authent...; Question 30: What is the primary purpose of a defined rule in an IPS?...; Question 31: Which two authentication types does OSPF support? (Choose tw...; Question 32: What is an advantage of split tunneling?...; Question 33: Which two features do CoPP and CPPr use to protect the contr...; Question 34: Which two are characteristics of RADIUS? (Choose two.)...; Question 35: An attacker installs a rogue switch that sends superior BPDU...; Question 36: Which security zone is automatically defined by the system?...; Question 37: Which mechanism does the FireAMP Connector use to avoid conf...; Question 38: Which IPSec mode is used to encrypt traffic directly between...; Question 39: Your security team has discovered a malicious program that h...; Question 40: In which configuration mode do you configure the ip ospf aut...; Question 41: What is the best way to confirm that AAA authentication is w...; Question 42: Which TACACS+ server-authentication protocols are supported ...; Question 43: Which two services define cloud networks? (Choose two.)...; Question 44: Which information can you display by executing the show cryp...; Question 45: Which type of address translation should be used when a Cisc...; Question 46: Which type of social-engineering attack uses normal telephon...; Question 47: In which three cases does the ASA firewall permit inbound HT...; Question 48: Scenario In this simulation, you have access to ASDM only. R...; Question 49: Which of the following statements about access lists are tru...; Question 50: Which feature can help a router or switch maintain packet fo...; Question 51: Which two next-generation encryption algorithms does Cisco r...; Question 52: By which kind of threat is the victim tricked into entering ...; Question 53: What is the most common Cisco Discovery Protocol version 1 a...; Question 54: Which type of secure connectivity does an extranet provide?...; Question 55: You have implemented a Sourcefire IPS and configured it to b...; Question 56: Which EAP method uses Protected Access Credentials?...; Question 57: How can you protect CDP from reconnaissance attacks?...; Question 58: Which statement about NAT table evaluation in the ASA is tru...; Question 59: Why does ISE require its own certificate issued by a trusted...; Question 60: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 61: Which two 802.1x features can you enable by running the IOS ...; Question 62: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 63: Which network device does NTP authenticate?...; Question 64: Which technology can block a non-malicious program that is r...; Question 65: Which feature filters CoPP packets?...; Question 66: Which command can you enter to configure OSPF to use hashing...; Question 67: What is a valid implicit permit rule for traffic that is tra...; Question 68: What is the purpose of the Integrity component of the CIA tr...; Question 69: Which two characteristics of a PVLAN are true? (Choose two.)...; Question 70: You are configuring a NAT rule on a Cisco ASA. Which descrip...; Question 71: Which statement about extended access lists is true?...; Question 72: Which protocol provides security to Secure Copy?...; Question 73: Which command do you enter to configure your firewall to con...; Question 74: What security feature allows a private IP address to access ...; Question 75: Which IPS detection method can you use to detect attacks tha...; Question 76: Which component offers a variety of security solutions, incl...; Question 77: What are the three layers of a hierarchical network design? ...; Question 78: What configuration allows AnyConnect to automatically establ...; Question 79: Which statement about Cisco ACS authentication and authoriza...; Question 80: Which two advantages does the on-premise model for MDM deplo...; Question 81: What is the Cisco preferred countermeasure to mitigate CAM o...; Question 82: Refer to the exhibit. (Exhibit) What are two effects of the ...; Question 83: Which three ESP fields can be encrypted during transmission?...; Question 84: A data breach has occurred and your company database has bee...; Question 85: How can you prevent NAT rules from sending traffic to incorr...; Question 86: How does a device on a network using ISE receive its digital...; Question 87: Which feature allows a dynamic PAT pool to select the next a...; Question 88: Which attack involves large numbers of ICMP packets with a s...; Question 89: What is an advantage of implementing a Trusted Platform Modu...; Question 90: What type of packet creates and performs network operations ...; Question 91: Which protocols use encryption to protect the confidentialit...; Question 92: Which two primary security concerns can you mitigate with a ...; Question 93: If a packet matches more than one class map in an individual...; Question 94: How can you mitigate attacks in which the attacker attaches ...; Question 95: When using the Adaptive Security Device Manager (ASDM), whic...; Question 96: Which two SNMPv3 services support its capabilities as a secu...; 1 commentQuestion 97: What is the maximum number of methods that a single method l...; Question 98: Which statement provides the best definition of malware?...; Question 99: How does PEAP protect the EAP exchange?...; Question 100: Which firewall configuration must you perform to allow traff...; Question 101: When setting up a site-to-site VPN with PSK authentication o...; Question 102: What are purposes of the Internet Key Exchange in an IPsec V...; Question 103: What is a reason for an organization to deploy a personal fi...; Question 104: Which NAT type allows only objects or groups to reference an...; Question 105: Which two characteristics of an application layer firewall a...; Question 106: Which syslog severity level is level number 7?...; Question 107: Which command initializes a lawful intercept view?...; Question 108: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 109: What does the policy map do in CoPP?...; Question 110: Which three statements about host-based IPS are true? (Choos...; Question 111: Which two types of VLANs using PVLANs are valid? (Choose two...; Question 112: What is a limitation of network-based IPS?...; Question 113: Which statement about interface and global access rules is t...; Question 114: Which Cisco product can help mitigate web-based attacks with...; Question 115: In which form of fraud does an attacker try to learn informa...; Question 116: Which type of PVLAN port allows hosts in the same VLAN to co...; Question 117: How does the transparent firewall process traffic through th...; Question 118: Which security principle has been violated if data is altere...; Question 119: Which statement about IOS privilege levels is true?...; Question 120: Which tasks is the session management path responsible for? ...; Question 121: How can FirePOWER block malicious email attachments?...; Question 122: For what reason would you configure multiple security contex...; Question 123: You want to allow all of your company's users to access the ...; Question 124: Which type of attack can exploit design flaws in the impleme...; Question 125: Which command enables authentication at the OSPFv2 routing p...; Question 126: Which statement about personal firewalls is true?...; Question 127: Which two actions can a zone-based firewall take when lookin...; Question 128: What is the effect of the send-lifetime local 23:59:00 31 De...; Question 129: Which command is needed to enable SSH support on a Cisco Rou...; Question 130: Which network topology describes multiple LANs in a geograph...; Question 131: Refer to the exhibit. (Exhibit) With which NTP server has th...; Question 132: Which two actions does an IPS perform? (Choose two.)...; Question 133: What mechanism does asymmetric cryptography use to secure da...; Question 134: Which two commands are used to implement Resilient IOS Confi...; Question 135: Which statement about application blocking is true?...; Question 136: What are two ways to prevent eavesdropping when you perform ...; Question 137: What are two challenges when deploying host-level IPS? (Choo...; Question 138: Which RADIUS server authentication protocols are supported o...; Question 139: Which command should be used to enable AAA authentication to...; Question 140: Which tool can an attacker use to attempt a DDoS attack?...; Question 141: Refer to the exhibit. (Exhibit) For which reason is the tunn...; Question 142: Scenario In this simulation, you have access to ASDM only. R...; Question 143: What type of algorithm uses the same key to encrypt and decr...; Question 144: Which alert protocol is used with Cisco IPS Manager Express ...; Question 145: How many crypto map sets can you apply to a router interface...; Question 146: Which type of firewall monitors and protects a specific syst...; Question 147: What can the SMTP preprocessor in FirePOWER normalize?...; Question 148: Which two options are the primary deployment models for mobi...; 1 commentQuestion 149: What is the transition order of STP states on a Layer 2 swit...; Question 150: Which two statements about stateless firewalls are true? (Ch...; Question 151: Which statements about reflexive access lists are true? (Cho...; Question 152: Which STP feature can prevent an attacker from becoming the ...; Question 153: What is the purpose of a honeypot IPS?...; Question 154: What is the FirePOWER impact flag used for?...; Question 155: Which option is the most effective placement of an IPS devic...; Question 156: Which statement about the communication between interfaces o...; Question 157: Which Sourcefire event action should you choose if you want ...; Question 158: Which type of social engineering attack targets top executiv...; Question 159: Which accounting notices are used to send a failed authentic...; Question 160: After reloading a router, you issue the dir command to verif...; Question 161: In which two situations should you use in-band management? (...; Question 162: Which component of a BYOD architecture provides AAA services...; Question 163: Scenario In this simulation, you have access to ASDM only. R...; Question 164: Which two ESA services are available for incoming and outgoi...; Question 165: Which IPS detection method examines network traffic for prec...; Question 166: Which security measures can protect the control plane of a C...; Question 167: Refer to the exhibit. (Exhibit) How many times was a read-on...; Question 168: Which two statements about Telnet access to the ASA are true...; Question 169: In which type of attack does the attacker attempt to overloa...; Question 170: Refer to the exhibit. (Exhibit) You have configured R1 and R...; Question 171: Which two are the default settings for port security? (Choos...; Question 172: When an IPS detects an attack, which action can the IPS take...; Question 173: A user on your network inadvertently activates a botnet prog...; Question 174: Which technology can best protect data at rest on a user sys...; Question 175: In which type of attack does an attacker send email messages...; Question 176: What three actions are limitations when running IPS in promi...; Question 177: If the native VLAN on a trunk is different on each end of th...

[×]

Download PDF File

Enter your email address to download Cisco.210-260.v2019-07-08.q177.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 137/177

LEAVE A REPLY

Download PDF File