Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Securing Cisco Networks with Sourcefire IPS

Last Update 4 days ago Total Questions : 60

The Securing Cisco Networks with Sourcefire IPS content is now fully updated, with all current exam questions added 4 days ago. Deciding to include 500-285 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 500-285 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 500-285 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Securing Cisco Networks with Sourcefire IPS practice test comfortably within the allotted time.

Question # 4

Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

A.

logging to database, SMS, SMTP, and SNMP

B.

logging to database, SMTP, SNMP, and PCAP

C.

logging to database, SNMP, syslog, and email

D.

logging to database, PCAP, SMS, and SNMP

Question # 5

Which option is not a characteristic of dashboard widgets or Context Explorer?

A.

Context Explorer is a tool used primarily by analysts looking for trends across varying periods of time.

B.

Context Explorer can be added as a widget to a dashboard.

C.

Widgets offer users an at-a-glance view of their environment.

D.

Widgets are offered to all users, whereas Context Explorer is limited to a few roles.

Question # 6

Which option is true of the Packet Information portion of the Packet View screen?

A.

provides a table view of events

B.

allows you to download a PCAP formatted file of the session that triggered the event

C.

displays packet data in a format based on TCP/IP layers

D.

shows you the user that triggered the event

Question # 7

Which option is derived from the discovery component of FireSIGHT technology?

A.

connection event table view

B.

network profile

C.

host profile

D.

authentication objects

Question # 8

The IP address::/0 is equivalent to which IPv4 address and netmask?

A.

0.0.0.0

B.

0.0.0.0/0

C.

0.0.0.0/24

D.

The IP address::/0 is not valid IPv6 syntax.

Question # 9

Context Explorer can be accessed by a subset of user roles. Which predefined user role is valid for FireSIGHT event access?

A.

Administrator

B.

Intrusion Administrator

C.

Maintenance User

D.

Database Administrator