Cisco 500-290 Online Practice Questions and Exam Preparation

Cisco 500-290 Online Questions & Answers

• Question 11:

  Cisco FireSIGHT can provide visibility into which three types of information that competing products cannot? (Choose three.)

  A. client-side applications
  B. viruses
  C. DoS attacks
  D. mobile devices
  E. database queries F: VM communications
  A. client-side applications
  D. mobile devices

• Question 12:

  Which option is derived from the discovery component of FireSIGHT technology?

  A. connection event table view
  B. network profile
  C. host profile
  D. authentication objects
  C. host profile

• Question 13:

  Host criticality is an example of which option?

  A. a default whitelist
  B. a default traffic profile
  C. a host attribute
  D. a correlation policy
  C. a host attribute

• Question 14:

  When you are editing an intrusion policy, how do you know that you have changes?

  A. The Commit Changes button is enabled.
  B. A system message notifies you.
  C. You are prompted to save your changes on every screen refresh.
  D. A yellow, triangular icon displays next to the Policy Information option in the navigation panel.
  D. A yellow, triangular icon displays next to the Policy Information option in the navigation panel.

• Question 15:

  Which statement regarding user exemptions is true?

  A. Non-administrators can be made exempt on an individual basis.
  B. Exempt users have a browser session timeout restriction of 24 hours.
  C. Administrators can be exempt from any browser session timeout value.
  D. By default, all users cannot be exempt from any browser session timeout value.
  A. Non-administrators can be made exempt on an individual basis.

• Question 16:

  Which statement is true when network traffic meets the criteria specified in a correlation rule?

  A. Nothing happens, because you cannot assign a group of rules to a correlation policy.
  B. The network traffic is blocked.
  C. The Defense Center generates a correlation event and initiates any configured responses.
  D. An event is logged to the Correlation Policy Management table.
  C. The Defense Center generates a correlation event and initiates any configured responses.

• Question 17:

  Which statement is true when adding a network to an access control rule?

  A. You can select only source networks.
  B. You must have preconfigured the network as an object.
  C. You can select the source and destination networks or network groups.
  D. You cannot include multiple networks or network groups as sources or destinations.
  C. You can select the source and destination networks or network groups.

• Question 18:

  What is the maximum timeout value for a browser session?

  A. 60 minutes
  B. 120 minutes
  C. 1024 minutes
  D. 1440 minutes
  D. 1440 minutes

• Question 19:

  Context Explorer can be accessed by a subset of user roles. Which predefined user role is not valid for FireSIGHT event access?

  A. Administrator
  B. Intrusion Administrator
  C. Security Analyst
  D. Security Analyst (Read-Only)
  B. Intrusion Administrator

• Question 20:

  Which interface type allows for VLAN tagging?

  A. inline
  B. switched
  C. high-availability link
  D. passive
  B. switched