CCNA Security Chapter 17 - Cisco IDS/IPS Fundamentals

A digital illustration depicting cybersecurity concepts related to Cisco IDS/IPS, featuring a network security device, shield imagery, and abstract representations of data flow and protection.

CCNA Security Quiz: Cisco IDS/IPS Fundamentals

Test your knowledge about Cisco intrusion detection and prevention systems with our comprehensive quiz! Dive into the core concepts of network security, including IPS methods, signature types, and best practices.

Topics covered in this quiz include:

Intrusion Prevention vs. Intrusion Detection
Different IPS deployment methods
Signature and anomaly-based detection techniques

11 Questions3 MinutesCreated by ScanningShark512

Which method should you implement when it is not acceptable for an attack to reach its intended victim?

IDS

IPS

Out of band

Hardware appliance

A company has hired you to determine whether attacks are happening against the server farm, and it does not want any additional delay added to the network. Which deployment method should be used?

Appliance-based inline

IOS software-based inline

Appliance-based IPS

IDS

Why does IPS have the ability to prevent an ICMP-based attack from reaching the intended victim?

Policy-based routing.

TCP resets are used.

The IPS is inline with the traffic.

The IPS is in promiscuous mode.

Which method of IPS uses a baseline of normal network behavior and looks for deviations from that baseline?

Reputation-based IPS

Policy-based IPS

Signature-based IPS

Anomaly-based IPS

Which type of implementation requires custom signatures to be created by the admin- istrator?

Reputation-based IPS

Policy-based IPS

Engine-based IPS

Anomaly-based IPS

Which method requires participation in global correlation involving groups outside your own enterprise?

Reputation-based IPS

Policy-based IPS

Signature-based IPS

Anomaly-based IPS

Which of the micro-engines contains signatures that can only match on a single packet, as opposed to a flow of packets?

Atomic

String

Flood

Other

Which of the following are properties directly associated with a signature? (Choose all that apply.)

ASR

SFR

TVR

Which of the following is not a best practice?

Assign aggressive IPS responses to specific signatures

Assign aggressive IPS responses based on the resulting risk rating generated by the attack

Tune the IPS and revisit the tuning process periodically

Use correlation within the enterprise and globally for an improved security posture

Which of the following is not a Next-Generation IPS (NGIPS) solution?

NGIPSv

ASA with FirePOWER

SIO IPS

FirePOWER 8000 series appliances

CCNA Security Chapter 17 - Cisco IDS/IPS Fundamentals

CCNA Security Quiz: Cisco IDS/IPS Fundamentals

More Quizzes