| This chapter covers the following subjects: Sensor Maintenance Software Updates Upgrading Sensor Software Updating the Sensor's License Image Recovery Restoring Default Sensor Configuration Resetting and Powering Down the Sensor
To keep your IPS operating effectively and efficiently, you need to maintain the software versions on your IPS devices. Cisco IPS software is continually being improved. Maintaining current software versions ensures that you have the latest functionality available in your Cisco IPS. Updating the software on your Cisco IPS devices is vital to effectively protecting your network from attack. Cisco IPS is continually evolving, with new signatures and IPS functionality. Updating your IPS software regularly guarantees that your IPS has the latest signatures and IPS functionality. "Do I Know This Already?" Quiz The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now. The 10-question quiz, derived from the major sections in the "Foundation and Supplemental Topics" portion of the chapter, helps you determine how to spend your limited study time. Table 11-1 outlines the major topics discussed in this chapter and the "Do I Know This Already?" quiz questions that correspond to those topics. Table 11-1. "Do I Know This Already?" Foundation and Supplemental Topics MappingFoundation or Supplemental Topic | Questions Covering This Topic |
|---|
Software Updates | 1, 3 | Upgrading Sensor Software | 4, 8, 9 | Updating the Sensor's License | 5 | Image Recovery | 2 | Restoring Default Sensor Configuration | 7, 10 | Resetting and Powering Down the Sensor | 6 |
Caution The goal of self-assessment is to gauge your mastery of the topics in this chapter. If you do not know the answer to a question or are only partially sure of the answer, you should mark this question wrong for purposes of the self-assessment. Giving yourself credit for an answer you correctly guess skews your self-assessment results and might provide you with a false sense of security.
| 1. | Which of the following is not a component of the Cisco IPS software filename? IPS version Service pack level Update type Signature version Software type
| | 2. | Which command enables you to fix a corrupted image on your sensor? repair downgrade restore recover update
| | 3. | If the filename of a software version is IDS-K9-sp-5.1-3-S36.rpm.pkg, what signature release is included in the software release? 36 5.1 3 1 1-3
| | 4. | When you are upgrading sensor images by using the CLI, which of the following is not a valid file transfer protocol? FTP HTTP HTTPS SCP TFTP
| | 5. | Which of the following is true if a Cisco IPS sensor running 5.0 software has an invalid license key? The sensor will not perform inline functionality. The sensor will not accept signature updates. The sensor will not operate in promiscuous mode. The sensor will not operate in promiscuous or inline mode.
| | 6. | When rebooting the sensor via the sensor's CLI, which command do you use? reboot reload shutdown reset restart
| | 7. | Which of the following sensor CLI commands is not valid? default service analysis-engine default service logger default service ssh-certificates default service trusted-certificates default service web-server
| | 8. | When configuring daily automatic updates via IDM, which of the following is not a valid configuration? Check for updates every 3 hours, beginning at 2 seconds after 12:00 Check for updates every 20 minutes, beginning at 6:00 Check for updates every 60 minutes, beginning at 10 seconds after 6:00 Check for updates every 120 minutes, beginning at 5 seconds after 19:00
| | 9. | Which sensor CLI command enables you to return to a previous sensor software image? downgrade restore recover revert
| | 10. | Which of the following is true? You can only use the sensor CLI to restore the sensor's default configuration. You can only use IDM to restore the sensor's default configuration. You can selectively restore the sensor's default configuration by using IDM. You can selectively restore the sensor's default configuration by using the sensor CLI.
|
The answers to the "Do I Know This Already?" quiz are found in the appendix. The suggested choices for your next step are as follows: 8 or less overall score Read the entire chapter. This includes the "Foundation and Supplemental Topics" and "Foundation Summary" sections and the Q&A section. 9 or 10 overall score If you want more review on these topics, skip to the "Foundation Summary" section and then go to the Q&A section. Otherwise, move to the next chapter.
|
