500-285 by Cisco Actual Free Exam Questions And Answers

Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System - 500-285 Exam Practice Test

Question 1

Which option is true of the Packet Information portion of the Packet View screen?

A. provides a table view of events

B. allows you to download a PCAP formatted file of the session that triggered the event

C. shows you the user that triggered the event

D. displays packet data in a format based on TCP/IP layers

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Remote access to the Defense Center database has which characteristic?

A. read-only

B. Postgres

C. Estreamer

D. read/write

Discussion 0

Correct Answer: A Vote an answer

Question 3

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

A. discover information about users

B. block traffic

C. route traffic

D. determine which users are involved in monitored connections

Discussion 0

Correct Answer: D Vote an answer

Question 4

Controlling simultaneous connections is a feature of which type of preprocessor?

A. rate-based attack prevention

B. detection enhancement

C. TCP and network layer preprocessors

D. performance settings

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which statement regarding user exemptions is true?

A. Administrators can be exempt from any browser session timeout value.

B. Non-administrators can be made exempt on an individual basis.

C. Exempt users have a browser session timeout restriction of 24 hours.

D. By default, all users cannot be exempt from any browser session timeout value.

Discussion 0

Correct Answer: B Vote an answer

Question 6

Access control policy rules can be configured to block based on the conditions that you specify in each rule. Which behavior block response do you use if you want to deny and reset the connection of HTTP traffic that meets the conditions of the access control rule?

A. block

B. interactive block with reset

C. block with reset

D. interactive block

Discussion 0

Correct Answer: C Vote an answer

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday

Support:

Contact now

Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System - 500-285 Exam Practice Test

Contact Us

Useful Links

Latest Updated