What does Cisco recommend when you are enabling Cisco IOS IPS?

The correct answer is A. Do not enable all the signatures at the same time. Router memory and resource constraints prevent a router from loading all Cisco IOS IPS signatures. Thus, it is recommended that you load only a selected set of signatures that are defined by the categories. Because the categories are applied in a "top-down" order, you should…

Security

Question

Options

ADo not enable all the signatures at the same time.
BDo not enable the ICMP signature.
CDisable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.
DDisable CEF because it is not compatible with Cisco IOS IPS.

How the community answered

(54 responses)

A
93% (50)
B
4% (2)
C
2% (1)
D
2% (1)

Explanation

Router memory and resource constraints prevent a router from loading all Cisco IOS IPS signatures. Thus, it is recommended that you load only a selected set of signatures that are defined by the categories. Because the categories are applied in a "top-down" order, you should first retire all signatures, followed by "unretiring" specific categories. Retiring signatures enables the router to load information for all signatures, but the router does not build the parallel scanning

Topics

#Cisco IOS IPS#signature management#IPS configuration

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice