640-553 exam is the code of IINS Implementing Cisco IOS Network Security . It is a hot exam of Cisco CCNA Security certification. Many candidates who want to get the Cisco CCNA Security certification, 640-553 exam is a good choice.

What is the key difference between host-based and network-based intrusion prevention?
A.Network-based IPS is better suited for inspection of SSL and TLS encrypted data flows.
B.Network-based IPS provides better protection against OS kernel-level attacks against hosts and servers.
C.Network-based IPS can provide protection to desktops and servers without the need of installing specialized software on the end hosts and servers.
D.Host-based IPS can work in promiscuous mode or inline mode.
E.Host-based IPS is more scalable then network-based IPS.
F.Host-based IPS deployment requires less planning than network-based IPS.
Answer:C
Which of these correctly matches the CLI command(s) to the equivalent SDM wizard that performs similar configuration functions?
A.Cisco Common Classification Policy Language configuration commands and the SDM Site-to-Site VPN wizard
B.auto secure exec command and the SDM One-Step Lockdown wizard
C.setup exec command and the SDM Security Audit wizard
D.class-maps, policy-maps, and service-policy configuration commands and the SDM IPS wizard
E.aaa configuration commands and the SDM Basic Firewall wizard
Answer:B

The Cisco 640-553 Learning Network brings you the latest in social networking, certifications content, games, blogs, discussion forums and more!
Click here to be a part of the Cisco Learning Network.
Register to create your own personal account. You will have to create a new account as your current logins will not work. Accessing premium content and participating in the social networking activities requires a Cisco Learning Network registration. Those who already have a Cisco.com account are encouraged to use the same user ID and email address when registering on the Cisco Learning Network site.

Related Cisco CCNA 640-816 free download