Cisco 500-290 Online Practice Questions and Exam Preparation

Cisco 500-290 Online Questions & Answers

• Question 51:

  A one-to-many type of scan, in which an attacker uses a single host to scan a single port on multiple target hosts, indicates which port scan type?

  A. port scan
  B. portsweep
  C. decoy port scan
  D. ACK scan
  B. portsweep

• Question 52:

  Which option is used to implement suppression in the Rule Management user interface?

  A. Rule Category
  B. Global
  C. Source
  D. Protocol
  C. Source

• Question 53:

  Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

  A. logging to database, SMS, SMTP, and SNMP
  B. logging to database, SMTP, SNMP, and PCAP
  C. logging to database, SNMP, syslog, and email
  D. logging to database, PCAP, SMS, and SNMP
  C. logging to database, SNMP, syslog, and email

• Question 54:

  A context box opens when you click on an event icon in the Network File Trajectory map for a file. Which option is an element of the box?

  A. Scan
  B. Application Protocol
  C. Threat Name
  D. File Name
  B. Application Protocol

• Question 55:

  Which option is not a characteristic of dashboard widgets or Context Explorer?

  A. Context Explorer is a tool used primarily by analysts looking for trends across varying periods of time.
  B. Context Explorer can be added as a widget to a dashboard.
  C. Widgets offer users an at-a-glance view of their environment.
  D. Widgets are offered to all users, whereas Context Explorer is limited to a few roles.
  B. Context Explorer can be added as a widget to a dashboard.

• Question 56:

  Which interface type allows for bypass mode?

  A. inline
  B. switched
  C. routed
  D. grouped
  A. inline

• Question 57:

  Which option is true when configuring an access control rule?

  A. You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.
  B. You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.
  C. You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.
  D. You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.
  A. You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.

• Question 58:

  When configuring an LDAP authentication object, which server type is available?

  A. Microsoft Active Directory
  B. Yahoo
  C. Oracle
  D. SMTP
  A. Microsoft Active Directory

• Question 59:

  Which Cisco AMP deployment would you recommend for advanced customers that want comprehensive threat protection, investigation, and response?

  A. trajectory
  B. AMP for MX
  C. AMP for Networks
  D. AMP for VPN
  C. AMP for Networks

• Question 60:

  Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

  A. subscribe to a URL intelligence feed
  B. subscribe to a VRT
  C. upload a list that you create
  D. automatically upload lists from a network share
  C. upload a list that you create