Quiz 640-553

Quiz 640-553, Cisco Certified Network Associate Security

Which two statements are true about the differences between IDS and IPS?

What command displays all existing IPsec security associations (SA)?

What two site-to-site VPN wizards are available in the Cisco SDM interface?

From what configuration mode would you enter the set peer ip-address command to specify the IP address of an IPsec peer?

Which statement is true when using zone-based firewalls on a Cisco router?

Which option is true of intrusion prevention systems?

Which option is true of using cryptographic hashes?

Which option is a desirable feature of using symmetric encryption algorithms?

Which option correctly defines asymmetric encryption?

Which three of these options are some of the best practices when you implement an effective firewall security policy?