Labour Day Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 2493360325

Good News !!! 500-285 Securing Cisco Networks with Sourcefire IPS is now Stable and With Pass Result

500-285 Practice Exam Questions and Answers

Securing Cisco Networks with Sourcefire IPS

Last Update 1 day ago
Total Questions : 60

500-285 is stable now with all latest exam questions are added 1 day ago. Just download our Full package and start your journey with Cisco Securing Cisco Networks with Sourcefire IPS certification. All these Cisco 500-285 practice exam questions are real and verified by our Experts in the related industry fields.

500-285 PDF

500-285 PDF (Printable)
$53.2
$132.99

500-285 Testing Engine

500-285 PDF (Printable)
$58
$144.99

500-285 PDF + Testing Engine

500-285 PDF (Printable)
$72.8
$181.99
Question # 1

Which option is true regarding the $HOME_NET variable?

Options:

A.  

is a policy-level variable

B.  

has a default value of "all"

C.  

defines the network the active policy protects

D.  

is used by all rules to define the internal network

Discussion 0
Question # 2

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

Options:

A.  

subscribe to a URL intelligence feed

B.  

subscribe to a VRT

C.  

upload a list that you create

D.  

automatically upload lists from a network share

Discussion 0
Question # 3

Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?

Options:

A.  

the directional operator in the rule header

B.  

the "flow" rule option

C.  

specification of the source and destination ports in the rule header

D.  

The detection engine evaluates all sides of a TCP communication regardless of the rule options.

Discussion 0
Question # 4

Which option describes the two basic components of Sourcefire Snort rules?

Options:

A.  

preprocessor configurations to define what to do with packets before the detection engine sees them, and detection engine configurations to define exactly how alerting is to take place

B.  

a rule statement characterized by the message you configure to appear in the alert, and the rule body that contains all of the matching criteria such as source, destination, and protocol

C.  

a rule header to define source, destination, and protocol, and the output configuration to determine which form of output to produce if the rule triggers

D.  

a rule body that contains packet-matching criteria or options to define where to look for content in a packet, and a rule header to define matching criteria based on where a packet originates, where it is going, and over which protocol

Discussion 0
Question # 5

The gateway VPN feature supports which deployment types?

Options:

A.  

SSL and HTTPS

B.  

PPTP and MPLS

C.  

client and route-based

D.  

point-to-point, star, and mesh

Discussion 0
Question # 6

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Options:

A.  

fast-path rules

B.  

thresholds or suppressions

C.  

blacklist

D.  

automatic application bypass

Discussion 0
Question # 7

Context Explorer can be accessed by a subset of user roles. Which predefined user role is valid for FireSIGHT event access?

Options:

A.  

Administrator

B.  

Intrusion Administrator

C.  

Maintenance User

D.  

Database Administrator

Discussion 0
Question # 8

When configuring an LDAP authentication object, which server type is available?

Options:

A.  

Microsoft Active Directory

B.  

Yahoo

C.  

Oracle

D.  

SMTP

Discussion 0
Question # 9

Which option is true of the Packet Information portion of the Packet View screen?

Options:

A.  

provides a table view of events

B.  

allows you to download a PCAP formatted file of the session that triggered the event

C.  

displays packet data in a format based on TCP/IP layers

D.  

shows you the user that triggered the event

Discussion 0
Get 500-285 dumps and pass your exam in 24 hours!

Free Exams Sample Questions