Exam Prep Questions

[ LiB ]

Question 1	Which directory does IDS MC use for its Web server application? A. \MDS B. \MDS\Web C. \MDS\Tomcat D. \MDS\Apache
A1:	Answer D is correct. The IDS MC uses the \MDS\Apache directory to store its Web server application. Answer A is incorrect. The \MDS does store the Web server application indirectly; however, Answer D is more correct. Answer B is incorrect because this directory doesn't exist on a default IDS MC installation. Answer C is incorrect; the \MDS\Tomcat is for the Tomcat Server application server that dispatches servlets to the IDS MC from Common Services.
Question 2	Which utility do you use to create SSH keys for IDS MC and a sensor? A. PuTTY B. PuTTYgen C. PuTTY Configuration D. PuTTYKeyGen
A2:	Answer B is correct. You use PuTTYgen to generate public and private keys for Rivest Shamir Adleman (RSA) type connections. Answers A and D are incorrect because they do not exist. Answer C is incorrect because you use the PuTTY Configuration client utility for Telnet or SSH host connections. You could use this tool to test SSH connections between the host computer and a sensor.
Question 3	What is the correct login path and port when logging into IDS MC? A. http://192.168.1.1:1741 B. http://192.168.1.1:1417 C. https ://192.168.1.1:443 D. http://192.168.1.1:80
A3:	Answer A is correct. To log in to IDS MC, you must log in to CiscoWorks first. CiscoWorks uses the URL of the server and the default port number of 1741. Therefore, Answers B, C, and D are incorrect.
Question 4	What is the default username and password for IDS MC? A. cisco, cisco B. netranger, netranger C. ciscoids, ciscoids D. admin, admin
A4:	Answer D is correct. Because you must log in to CiscoWorks first before reaching the IDS MC management screens, you use the CiscoWorks default username and password of admin , admin . Answer A is incorrect, cisco , cisco is the default IDS sensor username and password, not for IDS MC. Answer B is incorrect for IDS MC or IDS 4.0. Answer C is incorrect for IDS MC.
Question 5	Which two statements are true about IDS MC? (Choose two.) A. IDS MC can import sensor configuration from other IDS management tools. B. IDS MC cannot import sensor configuration from other IDS management tools. C. IDS MC requires CiscoWorks. D. IDS MC does not require CiscoWorks.
A5:	Answers A and C are correct. IDS MC is an add-on module to CiscoWorks and cannot operate as a standalone product. IDS MC can also import sensor configurations for other management tools, saving configuration time. Therefore, Answers B and D are incorrect.
Question 6	What is the default username and password for the Sybase database that IDS MC uses? A. cisco, cisco B. admin, admin C. ciscodb, ciscodb D. None are correct.
A6:	Answer D is correct. During database installation, the Sybase database prompts you to enter the username and password you desire , making no default password possible. Answer A is incorrect; however, cisco , cisco is the default password for an IDS 4.0 sensor. Answer B is incorrect; admin , admin is the default username/password for CiscoWorks. Answer C is incorrect; it is not the default for any system.
Question 7	Which IDS process retrieves notification requests from other subsystems and performs the requested notification? A. IDS_RetNotify B. IDS_Retriever C. IDS_Notifier D. IDS_Receiver
A7:	Answer C is correct. The IDS_Notifier retrieves notifications and performs the requested notifications. Answers A and B are incorrect; they are not IDS processes. Answer D is incorrect; the IDS_Receiver receives Cisco IDS alarms and syslog security events and stores them in the database.
Question 8	Which IDS process defines event rules and requests user -specified notification when appropriate? A. IDS_Notifier B. IDS_Scheduler C. IDS_Processor D. IDS_Analyzer
A8:	Answer D is correct. The IDS_Analyzer processes the defined event rules and requests user-specified notification when appropriate. Answer A is incorrect; the IDS_Notifier retrieves notifications and performs the requested notifications. Answers B and C are incorrect; they are not IDS processes.
Question 9	What command do you use to add keys for SSH communications to a sensor? A. ssh authorized-key B. ssh trust-key C. authorized-key D. trust-key
A9:	Answer A is correct. You use ssh authorized-key to add public keys to the sensor for SSH communications. Answers B, C, and D are incorrect; these commands do not exist.
Question 10	What should you do to the IDS MC if a sensor device's software version is not in the drop-down menu? A. Reinstall IDS MC. B. Update the sensor software. C. Update the IDS MC. D. Restart the sensor.
A10:	Answer C is correct. You must update the IDS MC software to support other sensor software versions. Answer A is incorrect; reinstalling IDS MC will probably create the same problem. Answer B is incorrect; this problem will likely happen to sensors with newer software version than what the current IDS MC will support. Upgrading the IDS MC is a better solution. Answer D is incorrect.

[ LiB ]