1.
Match the correct relationship between the Cisco Security MARS terms and their definitions.
1. queries
2. events
3. sessions
4. incidents
5. rules
2.
Which attack can be detected by Cisco Security MARS by use of NetFlow data?
3.
Which option is correct about the case management feature of Cisco Security MARS?
4.
Which protocol is used by Juniper NetScreen IDP to exchange IPS events with the Cisco Security MARS?
5.
Observe the following items carefully, what enables the Cisco Security MARS appliance to profile network usage and detect statistically significant anomalous behavior from a computed baseline?
6.
Which method can be used by the Cisco Security MARS appliance to perform IP address correlation (that is, map IP address translation) across NAT and PAT boundaries?
7.
Which description is correct with regard to Cisco Security MARS and Cisco IPS signature support?
8.
What will occur when you try to run a Cisco Security MARS query that will take a long time to complete?
9.
According to the following diagram displayed on the MARS GUI screen, can you tell me the reason that the Push function is not enabled (grayed out)?
10.
The Cisco Security MARS appliance supports which protocol for data archiving and restoring?