500-275 Securing Cisco Networks with Sourcefire FireAMP Endpoints (SSFAMP)

PDF question preview Back to product

Reading controls

Reader tools

Free demo

8 of 50 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice8

Cisco · 500-275

Free 500-275 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

What do policies enable you to do?

A
specify a custom whitelist
B
specify group membership
C
specify hosts to include in reports
D
specify which events to view

Reveal answer details Close answer details

Correct answerA

Question 2

Single choice

Which statement is true about the Device Trajectory feature?

A
It shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.
B
A "plus" sign on the File Trajectory map indicates that you can execute the file inside FireAMP.
C
In the File Trajectory map, you can view the parent process for a file by selecting the infected system.
D
It shows hosts that display Indications of Compromise.

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

What is a valid data source for DFC Windows connector policy configuration?

A
SANS
B
NIST
C
Emerging Threats
D
Custom and Sourcefire

Reveal answer details Close answer details

Correct answerD

Question 4

Single choice

Which statement about two-step authentication is true?

A
It is the ability to use two separate passwords.
B
It is the ability to enable biometric authentication.
C
It is the ability to have a passphrase sent to a mobile device.
D
It is the ability to use a verification code in conjunction with the correct username and password.

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

Which tool can you use to query the history.db file?

A
Curl
B
FireAMP_Helper.vbs
C
cscript
D
SQLite

Reveal answer details Close answer details

Correct answerD

Question 6

Single choice

When a user initiates a scan, which types of scan are available as options?

A
scheduled scan, thorough scan, quick scan, network scan
B
jiffy scan, overnight scan, scan when available, vulnerability scan
C
flash scan, custom scan, full scan
D
none, because user-initiated scans are not allowed

Reveal answer details Close answer details

Correct answerC

Question 7

Single choice

Which statement describes an advantage of cloud-based detection?

A
Limited customization allows for faster detection.
B
Fewer resources are required on the endpoint.
C
Sandboxing reduces the overall management overhead of the system.
D
High-speed analytical engines on the endpoint limit the amount of work the cloud must perform.

Reveal answer details Close answer details

Correct answerB

Question 8

Single choice

A default FireAMP Private Cloud installation can accommodate how many connectors over which period of time?

A
100 connectors over a 15-day period
B
1000 connectors over a 45-day period
C
5000 connectors over a 10-day period
D
500 connectors over a 30-day period

Reveal answer details Close answer details

Correct answerD