Skip to main content

500-275 Real Exam Questions

Securing Cisco Networks with Sourcefire FireAMP Endpoints (SSFAMP)

50 questions available · Page 1 of 5

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

The Accounts menu contains items that are related to FireAMP console accounts.

Which menu allows you to set the default group policy?

  1. A

    Audit Log

  2. B

    Users

  3. C

    Applications

  4. D

    Business

Show answer and explanation

Correct answer: D

Question 2 Single choice

Which pair represents equivalent processes whose names differ, depending on the connector version that you are running?

  1. A

    immunet_protect and iptray

  2. B

    agent.exe and sfc.exe

  3. C

    TETRA and SPERO

  4. D

    ETHOS and SPERO

Show answer and explanation

Correct answer: B

Question 3 Single choice

Which statement represents a best practice for deploying on Windows servers?

  1. A

    You should treat Windows servers like any other host in the deployment.

  2. B

    You should obtain the Microsoft TechNet article that describes the proper exclusions for Windows servers.

  3. C

    You should never configure exclusions for Windows servers.

  4. D

    You should deploy FireAMP connectors only alongside existing antivirus software on Windows servers.

Show answer and explanation

Correct answer: B

Question 4 Single choice

Which option describes a requirement for using Remote File Fetch?

  1. A

    It must be done from a private cloud console.

  2. B

    It can be done only over port 32137.

  3. C

    The administrator must have two-step authentication enabled.

  4. D

    The feature is integrated into the product, so no specific requirements must be fulfilled.

Show answer and explanation

Correct answer: C

Question 5 Single choice

Custom whitelists are used for which purpose?

  1. A

    to specify which files to alert on

  2. B

    to specify which files to delete

  3. C

    to specify which files to ignore

  4. D

    to specify which files to sandbox

Show answer and explanation

Correct answer: C

Question 6 Single choice

When discussing the FireAMP product, which term does the acronym DFC represent?

  1. A

    It means Detected Forensic Cause.

  2. B

    It means Duplicate File Contents.

  3. C

    It means Device Flow Correlation.

  4. D

    It is not an acronym that is associated with the FireAMP product.

Show answer and explanation

Correct answer: C

Question 7 Single choice

How does application blocking enhance security?

  1. A

    It identifies and logs usage.

  2. B

    It tracks application abuse.

  3. C

    It deletes identified applications.

  4. D

    It blocks vulnerable applications from running, until they are patched.

Show answer and explanation

Correct answer: D

Question 8 Single choice

Which hosts merit special consideration for crafting a policy?

  1. A

    end-user hosts

  2. B

    domain controllers

  3. C

    Linux servers

  4. D

    none, because all hosts should get equal consideration

Show answer and explanation

Correct answer: B

Question 9 Single choice

File information is sent to the Sourcefire Collective Security Intelligence Cloud using which format?

  1. A

    MD5

  2. B

    SHA-1

  3. C

    filenames

  4. D

    SHA-256

Show answer and explanation

Correct answer: D

Question 10 Single choice

In a FireAMP Private Cloud installation, which server does an administrator use to manage connector policy and view events?

  1. A

    opadmin.<your domain>.com

  2. B

    console.<your domain>.com

  3. C

    cloud.<your domain>.com

  4. D

    aws.<your domain>.com

Show answer and explanation

Correct answer: B