Which item is correct regarding Cisco IOS IPS on Cisco IOS Release 12.4(11)T and later ?
A.
uses Cisco IPS 5.x signature format
B.
supports SDEE, SYSLOG, and SNMP for sending Cisco IPS alerts
C.
requires the Basic or Advanced Signature Definition File
D.
uses the built-in signatures that come with the Cisco IOS image as backup
Explanation:
This topic was not mentioned once in the entire Certification Guide, so be glad you came
across the question here. Starting in IOS 12.4(11 )T , version 4.x signature files are no
longer supported, and only the 5.x format is accepted. 4.x files have to be migrated to the
5.x format.
This topic is not mentioned indeed in any of the certification guides, but it is mentioned in the Cisco flash course “Cisco CCNA Security 1.0”, in chapter 5, section 5.2.1 “IPS Signature characteristics”:
“SMEs are constantly being updated. For example, before Release 12.4(11T), the Cisco IPS signature format used version 4.x. Since IOS 12.4(11)T, Cisco introduced version 5.x, an improved IPS signature format. The new version supports encrypted signature parameters and other features such as signature risk rating, which rates the signature on security risk.”