500-285：最新的Cisco認證500-285考題，Securing Cisco Networks with Sourcefire Intrusion Prevention System認證

問題1
Controlling simultaneous connections is a feature of which type of preprocessor?

A. performance settings

B. detection enhancement

C. TCP and network layer preprocessors

D. rate-based attack prevention

正確答案: D

問題2
Which statement is true when network traffic meets the criteria specified in a correlation rule?

A. An event is logged to the Correlation Policy Management table.

B. The Defense Center generates a correlation event and initiates any configured responses.

C. Nothing happens, because you cannot assign a group of rules to a correlation policy.

D. The network traffic is blocked.

正確答案: B

問題3
FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

A. objects

B. devices

C. application

D. protocol layer

正確答案: C

問題4
When configuring FireSIGHT detection, an administrator would create a network discovery policy and set the action to "discover". Which option is a possible type of discovery?

A. anti-malware

B. IPS event

C. host

D. networks

正確答案: C

問題5
How do you configure URL filtering?

A. Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

B. Add blocked URLs to the global blacklist.

C. Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

D. Create a variable.

正確答案: C

問題6
Where do you configure widget properties?

A. the Local Configuration page

B. dashboard properties

C. the Widget Properties button in the title bar of each widget

D. Context Explorer

正確答案: C

最新的Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System - 500-285免費考試真題

專業認證

品質保證

輕松通過

免費試用