ccna 6 chapter 3 exam answers

ccna 6 chapter 3 exam answers.5.3.3.2 Changing Feature BehaviorThe behavior of a feature or a group of features can be changed using the IOSCLI and based on the feature classification. To change the behavior, this must be done using the event-action command in IPS CategoryAction mode or Signature DefinitionEngine mode. The event-action command has several parameters, including produce-alert>deny-packet-inline and reset-tcp-connection05.3.3.3 Editing FeaturesWhen creating a CiscoIOS IPS rule using the IPS Rule Wizard, IPS features are loaded in as part of the process. To view the features on the router, select Configure > Security > Intrusion Prevention > EditIPS > Signatures in the menu bar of the Cisco Configuration Expert. ensure that all features are loaded correctly on the router or security device. From this window, administrators can add custom features or import features downloaded from cisco.com. They can edit, delete, enable, and disable features.The feature tree enables administrators to filter the feature list by the type of feature they want to view. To modify a feature, right-click the feature tree and select an option from the pop-up menu. To change the severity level of a feature, select SetSeverityTo, and then select the appropriate severity level from the list.5.3.3.4 Adjusting FeaturesYou can use Cisco Configuration Expert to adjust the configuration of a feature. To adjust a feature, select Configure > Security > IntrusionPrevention > Edit IPS > Signatures> in the menu bar of Cisco Configuration Expert to bring up a list of available features.To change the behavior of a feature, right-click the feature and select the Actions option in the pop-up menu; the AssignActions window appears. The selectable actions depend on the content of the feature, but the following are the most common actions.Deny attacker inline------ If the CiscoIOS IPS system believes that traffic from a particular IP address is initiated by an attacker, it can create an ACL to deny all traffic from that IP address.Deny connection inline--------- This packet and all subsequent packets belonging to this TCP flow are discarded.