Which description of an advantage of utilizing IPS virtual sensors is true?
A.
The persistent store is unlimited for the IPS virtual sensor.
B.
The virtual sensor does not require 802.1q headers for inbound traffic.
C.
Asymmetric traffic can be split between multiple virtual sensors
Explanation:
http://www.cisco.com/c/en/us/td/docs/security/ips/7-
0/configuration/guide/cli/cliguide7/cli_virtual_sensors.pdf
•Persistent store is limited.
The virtual sensor must receive traffic that has 802.1q headers (other than traffic on the native VLAN of the capture port).
You must assign both sides of asymmetric traffic to the same virtual sensor.
When you choose to modify packets inline, if the packets from a stream are seen twice by the Normalizer engine, it cannot properly track the stream state and often the stream is dropped. This situation occurs most often when a stream is routed through multiple VLANs or interfaces that are being monitored by the IPS. A further complication in this situation is the necessity of allowing asymmetric traffic to merge for proper tracking of streams when the traffic for either direction is received from different VLANs or interfaces.
Which description of an advantage of utilizing IPS virtual sensors is true?
A. Different configurations can be applied to different sets of traffic.
B. The persistent store is unlimited for the IPS virtual sensor.
C. The virtual sensor does not require 802.1q headers for inbound traffic.
D. Asymmetric traffic can be split between multiple virtual sensors
Answer: A