Cisco 500-290 Online Practice Questions and Exam Preparation

Cisco 500-290 Online Questions & Answers

• Question 21:

  Access control policy rules can be configured to block based on the conditions that you specify in each rule. Which behavior block response do you use if you want to deny and reset the connection of HTTP traffic that meets the conditions of the access control rule?

  A. interactive block with reset
  B. interactive block
  C. block
  D. block with reset
  D. block with reset

• Question 22:

  Which option can you enter in the Search text box to look for the trajectory of a particular file?

  A. the MD5 hash value of the file
  B. the SHA-256 hash value of the file
  C. the URL of the file
  D. the SHA-512 hash value of the file
  B. the SHA-256 hash value of the file

• Question 23:

  Which event source can have a default workflow configured?

  A. user events
  B. discovery events
  C. server events
  D. connection events
  B. discovery events

• Question 24:

  Suppose an administrator is configuring an IPS policy and attempts to enable intrusion rules that require the operation of the TCP stream preprocessor, but the TCP stream preprocessor is turned off. Which statement is true in this situation?

  A. The administrator can save the IPS policy with the TCP stream preprocessor turned off, but the rules requiring its operation will not function properly.
  B. When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.
  C. The administrator will be prevented from changing the rule state of the rules that require the TCP stream preprocessor until the TCP stream preprocessor is enabled.
  D. When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the rules that require the TCP stream preprocessor will be turned off for the IPS policy.
  B. When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.

• Question 25:

  Which option is true of the Packet Information portion of the Packet View screen?

  A. provides a table view of events
  B. allows you to download a PCAP formatted file of the session that triggered the event
  C. displays packet data in a format based on TCP/IP layers
  D. shows you the user that triggered the event
  C. displays packet data in a format based on TCP/IP layers

• Question 26:

  Controlling simultaneous connections is a feature of which type of preprocessor?

  A. rate-based attack prevention
  B. detection enhancement
  C. TCP and network layer preprocessors
  D. performance settings
  A. rate-based attack prevention

• Question 27:

  Which statement is true concerning static NAT?

  A. Static NAT supports only TCP traffic.
  B. Static NAT is normally deployed for outbound traffic only.
  C. Static NAT provides a one-to-one mapping between IP addresses.
  D. Static NAT provides a many-to-one mapping between IP addresses.
  C. Static NAT provides a one-to-one mapping between IP addresses.

• Question 28:

  Which statement is true in regard to the Sourcefire Security Intelligence lists?

  A. The global blacklist universally allows all traffic through the managed device.
  B. The global whitelist cannot be edited.
  C. IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.
  D. The Security Intelligence lists cannot be updated.
  C. IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.

• Question 29:

  Which feature of the preprocessor configuration pages lets you quickly jump to a list of the rules associated with the preprocessor that you are configuring?

  A. the rule group accordion
  B. a filter bar
  C. a link below the preprocessor heading
  D. a button next to each preprocessor option that has a corresponding rule
  C. a link below the preprocessor heading

• Question 30:

  Which option is true regarding the $HOME_NET variable?

  A. is a policy-level variable
  B. has a default value of "all"
  C. defines the network the active policy protects
  D. is used by all rules to define the internal network
  C. defines the network the active policy protects