1.
The Cisco IDM Custom Signature Wizard asks you to select between the protocol types IP, ICMP, UDP, and TCP under which circumstance?
2.
Regarding the Cisco IPS NME, when should the heartbeat reset be disabled on the ISR?
3.

Which Cisco IPS appliance feature uses profile-based intrusion detection?
4.
Numerous attacks using duplicate packets, changed packets, or out-of-order packets are able to successfully evade and pass through the Cisco IPS appliance when it is operating in inline mode. What could be causing this problem?
5.
When the Cisco IPS appliance is operating in inline mode, what is the default event actions rule?
6.
In tuning a Cisco IPS signature, you need to edit the regexp string of the Cisco IPS signature, but when editing the signature, the regexp string of the signature cannot be edited. What should you do?
7.
Which application within the Cisco IPS appliance can modify the configurations of other devices on the network?
8.
A Cisco IPS appliance running in a network environment with asymmetrical traffic flow is experiencing many false positive alerts that are triggered by the 13000 signature ID. What can the IPS administrator tune on the IPS to reduce the false positives?
9.
Which Cisco IPS appliance signature engine uses signature events as input to correlate different signatures into a higher level event?
10.
Referring to the monitor session 1 destination GigabitEthernet0/47 ingress Cisco Catalyst switch command, what does the "ingress" command option enable?