Share your IPS Experience
As you know, the CCSP certification requires you to pass 3 exams: SNRS, SNAF, IPS and one of three optional exams CANAC, MARS or SNAA but currently this site has only materials for CCNA Security 640-553. Many candidates have requested us to put up materials for other exams but it is a time-consuming work. In the mean time, we created the “Share your experience” for the IPS exam. We really hope anyone who read securitytut, 9tut, digitaltut, certprepare, networktut and voicetut contribute to these sections as your experience is invaluable for CCSP learners to complete their goals.
Please share with us your experience after taking the IPS exam, your materials, the way you learned, your recommendations…
Cleared IPS (642-553) a couple of days ago.
Note: Cisco has announced refresh of the CCSP course. Last day for the old series exams around Apr 2011. The new IPS 7.0 is being offered from around Nov 2010
Study material used
- Cisco Student guide for IPS.
- Cisco CLI guide for IPS
- CBT Nuggets. Particularly the updates videos #21-25 are very nice.
DONT bother with the Cisco Exam Guide (obsoleted).
What came in the exam – Few Drag and Drop, ISDM simlets, ISDM based testlets and one console simulation was there in the paper.
Get really familiar with the IPS 6.0 ISDM GUI.
The CBT nuggets and CLI guide come in handy for the console based simulation.
Concepts to work on
- Event Action Overrides vs Filters
- Promiscuous vs Inline
- Calculation of Risk Rating – FN of (ASR, TVR, SFR, WLR, ARR, …)
- Bypass modes and their meaning
- Matching attack types and behaviours
- Event Actions – Difference b/w block host, block connection, tcp reset and so on. You got to watch out for the english verbiage
e.g If it says block flow then it indicates block connection, promiscuos – tcp reset. Block attacker then its host based
Can you share the study materials or let me know where I can get them please. My emails
is sierrerocco@yahoo.com.
Thanks in advance.
all question came from pass4sure .
taufique can u provide the link to download
thanks
@sierreocco . Try hxxp://www.ciscoguides.com for the study material
what do you think about the below answered questio
I think the answer is (sensing,logging,blocking)
QUESTION NO: 51 ( AT v1.8, P4s v4.18)
What are the three roles of the Cisco IPS Sensor interface? (Choose three.)
A. blocking
B. bypass
C. logging
D. alternate TCP reset
E. sensing (monitoring)
F. command and control
Answer: D,E,F
Is P4s 118Q and AT 113Q are still valid, as i plan to take exam at 12.12.2010
i am looking to start studying for the CCNA Security. Does anyone have the links for the latest pass4sure?
need help!!!!
how can i simulate/emulate cisco idm 6.0
thanks in advance.
You can get 6.2.1 at the following link: http://hotfile.(c|o|m)/dl/71273915/37f02c0/—>IME-6.2.1.<–exe
please remove signs.
Passed 642-533 with 9xx/1000. Exam time is 90 min + 30 Min for none native speakers. There where 62 questions + 1 simulation + 1 simlet with 5 questions . The passing score was 763/1000.
I use:
- original Cisco docs
- CBT videos
- 4215 sensor
- P4S & Actualtest dumps.
The dumps are valid. Many of the questions in exam have more then 4 choices, look for it.
Now i am CCSP
@noname
Congratulations on the CCSP!
Hi
I have just cleared SNRS and intent to take IPSv6 before deadline May, 31st
Thanks noname so much for your information. Please keep in touch here
Hi any one have the program to give the Exam.
I am planning to take the exam too jeje, please keep us posted. Thanks
Looking to take the 642-533 before the expiration date in the USA. Thanks for the heads up noname.
@JeJe, have you taken the exam yet?
Any exam takers want to share experience? thanks
I will take this next month, 3 modules is enough for this month
, let ‘s relax
Me too Jeje! after this exam, i will have my time to relax and concentrate on my work. keep us updated for the modules you will be using.
@Mohamed Shehata – They are asking about interfaces purpose (general, not just sensing interfaces), so obiously correct answers are:
- command and control -> this the management interface
- sensing -> these are the sensing interfaces
- alternate TCP reset -> if configured, the interface will send RST packet to the attacker
‘logging’ and ‘blocking’ is not an interface role, but is performed by the appliance software instead
HI jeje,
Any updates? thanks
any one pass exam
Hi,
Are the labs using the GUI or CLI or both?
Thanks
Oh, time just gone so fast. I am preparing 642-533 now
I have prepared for exam today, but the cisco examination system have some problem, is there any one know what happend?
Passed IPS today, 63 questions 5DD, 2 Lab sim and 1 hotspot.
Cisco.CertifyMe.642-533.v2011-01-13.by.Jordge.115q-suggestion.vce 100% valid
I am CCSP and CCNP Sec now, thanks for all
So cross your fingers please!What I personaly appreciate most was that IELTS gave me equal chances because I am suffering from dyslexia and I was given extra time for reading and writing and honestly without this it will be for me much more harder to succeed..
7/22/2011 !Took my test 2day … 640-553 … passed 933/1000 … a bit disappointed why did i not score 993 or above … all the sims are still valid … one or two questions were unfamiliar or were not seen on this study guide but it was nothing out of the ordinary … Appreciate securitytut.com to launch this discussion …. All Is Well!
Hi everybody , does 642-533 still valid ?
I think that I enforced now to take 624-627 instead of 642-533 , plz correct me if I’m wrong !
hi, can anybody provide information about new simulators asking for 642-627.