VCEdump

500-285 Securing Cisco Networks with Sourcefire Intrusion Prevention System

PDF question preview Back to product

Reading controls

Reader tools

Free demo

9 of 60 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice9

Cisco · 500-285

Free 500-285 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

Which statement is true when network traffic meets the criteria specified in a correlation rule?

A
Nothing happens, because you cannot assign a group of rules to a correlation policy.
B
The network traffic is blocked.
C
The Defense Center generates a correlation event and initiates any configured responses.
D
An event is logged to the Correlation Policy Management table.

Reveal answer details Close answer details

Correct answerC

Question 2

Single choice

Which option is a valid whitelist evaluation value?

A
pending
B
violation
C
semi-compliant
D
not-evaluated

Reveal answer details Close answer details

Correct answerD

Question 3

Single choice

Which option is true when configuring an access control rule?

A
You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.
B
You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.
C
You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.
D
You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

Remote access to the Defense Center database has which characteristic?

A
read/write
B
read-only
C
Postgres
D
Estreamer

Reveal answer details Close answer details

Correct answerB

Question 5

Single choice

FireSIGHT recommendations appear in which layer of the Policy Layers page?

A
Layer Summary
B
User Layers
C
Built-In Layers
D
FireSIGHT recommendations do not show up as a layer.

Reveal answer details Close answer details

Correct answerC

Question 6

Single choice

The gateway VPN feature supports which deployment types?

A
SSL and HTTPS
B
PPTP and MPLS
C
client and route-based
D
point-to-point, star, and mesh

Reveal answer details Close answer details

Correct answerD

Question 7

Single choice

Which option is a remediation module that comes with the Sourcefire System?

A
Cisco IOS Null Route
B
Syslog Route
C
Nmap Route Scan
D
Response Group

Reveal answer details Close answer details

Correct answerA

Question 8

Single choice

Suppose an administrator is configuring an IPS policy and attempts to enable intrusion rules that require the operation of the TCP stream preprocessor, but the TCP stream preprocessor is turned off.

Which statement is true in this situation?

A
The administrator can save the IPS policy with the TCP stream preprocessor turned off, but the rules requiring its operation will not function properly.
B
When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.
C
The administrator will be prevented from changing the rule state of the rules that require the TCP stream preprocessor until the TCP stream preprocessor is enabled.
D
When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the rules that require the TCP stream preprocessor will be turned off for the IPS policy.

Reveal answer details Close answer details

Correct answerB

Question 9

Single choice

Context Explorer can be accessed by a subset of user roles.

Which predefined user role is not valid for FireSIGHT event access?

A
Administrator
B
Intrusion Administrator
C
Security Analyst
D
Security Analyst (Read-Only)

Reveal answer details Close answer details

Correct answerB

Free 500-285 Exam Dumps Preview

Securing Cisco Networks with Sourcefire Intrusion Prevention System

PREVIEW CONTENTS · 1 VOLUME

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9