The default virtual sensor on all IPS appliances is vs0. Which three components are assigned to vs0 by default? (Choose three.)
A.
sig0
B.
engine0
C.
rules0
D.
ad0
E.
filters0
F.
gc0
Explanation:
http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/idm/idm_policies.html
The sensor can receive data inputs from one or many monitored data streams. These monitored data streams can either be physical interface ports or virtual
interface ports. For example, a single sensor can monitor traffic from in front of the firewall, from behind the firewall, or from in front of and behind the firewall
concurrently. And a single sensor can monitor one or more data streams. In this situation a single sensor policy or configuration is applied to all monitored data
streams.
A virtual sensor is a collection of data that is defined by a set of configuration policies. The virtual sensor is applied to a set of packets as defined by interface
component. A virtual sensor can monitor multiple segments, and you can apply a different policy or configuration for each virtual sensor within a single physical
sensor. You can set up a different policy per monitored segment under analysis. You can also apply the same policy instance, for example, sig0, rules0, or ad0, to
different virtual sensors. You can assign interfaces, inline interface pairs, inline VLAN pairs, and VLAN groups to a virtual sensor.