Which three Cisco IPS cross-launch capabilities do Cisco Security Manager and Cisco Security MARS support? (Choose three.)
A.
Edit IPS signatures in Cisco Security Manager from a Cisco Security MARS query.
B.
Create custom signatures in Cisco Security Manager from a Cisco Security MARS query.
C.
Create event action filters in Cisco Security Manager from a Cisco Security MARS query.
D.
Create a Cisco Security MARS drop rule from Cisco Security Manager policy.
E.
Create a Cisco Security MARS user inspection rule from Cisco Security Manager policy.
F.
Query Cisco Security MARS from Cisco Security Manager policy.
Explanation:
“…MARS creates queries that include a launch point for CSM. When CSM is launched, you can carry out the following (cross-connected actions):
Edit an IPS Signature
Add an event action filter to an IPS configuration in Cisco Security Manager and when you use CSM to cross-launch MARS, you can query events that were
originated by the signatures in CSM.”
http://my.safaribooksonline.com/book/certification/ccnp/9780132372107/integrating-cisco-ips- with-csm-andcisco-security-mars/435#