500-285 by Cisco Valid Free Exam Practice Test

Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System - 500-285 Exam Practice Test

Question 1

Which statement regarding user exemptions is true?

A. Administrators can be exempt from any browser session timeout value. B. Exempt users have a browser session timeout restriction of 24 hours. C. Non-administrators can be made exempt on an individual basis. D. By default, all users cannot be exempt from any browser session timeout value.

Correct Answer: C

Question 2

A one-to-many type of scan, in which an attacker uses a single host to scan a single port on multiple target hosts, indicates which port scan type?

A. ACK scan B. portsweep C. port scan D. decoy port scan

Correct Answer: B

Question 3

Which event source can have a default workflow configured?

A. user events B. connection events C. server events D. discovery events

Correct Answer: D

Question 4

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

A. block traffic B. route traffic C. discover information about users D. determine which users are involved in monitored connections

Correct Answer: D

Question 5

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

A. upload a list that you create B. subscribe to a URL intelligence feed C. automatically upload lists from a network share D. subscribe to a VRT

Correct Answer: A

Question 6

Which statement is true regarding malware blocking over HTTP?

A. It can be done in both the download and upload direction. B. It can be done only in the upload direction. C. It can be done only in the download direction. D. HTTP is not a supported protocol for malware blocking.

Correct Answer: A