Cisco 500-275 SSFAMP Exam Questions Instant Access

Question 1

The FireAMP connector monitors the system for which type of activity?

Avulnerabilities

Benforcement of usage policies

Cfile operations

Dauthentication activity

Answer : C

Question 2

Which type of activity is shown in the Device Trajectory page?

Athe IP addresses of hosts on which a file was seen

Bthe activity of the FireAMP console users

Cthe hosts that are in the same group as the selected host

Dfile creation

Answer : D

Question 3

Which feature allows retrospective detection?

ATotal Recall

BCloud Recall

CRecall Alert

DRecall Analysis

Answer : B

Question 4

Which statement is true about the Device Trajectory feature?

AIt shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.

BA 'plus' sign on the File Trajectory map indicates that you can execute the file inside FireAMP.

CIn the File Trajectory map, you can view the parent process for a file by selecting the infected system.

DIt shows hosts that display Indications of Compromise.

Answer : C

Question 5

Which tool can you use to query the history.db file?

ACurl

BFireAMP_Helper.vbs

Ccscript

DSQLite

Answer : D

Question 6

FireAMP reports can be distributed by which mechanism?

Aemail

Bcloud sync

CWindows file share

Da Crystal Reports subscription

Answer : A

Question 7

What is a valid data source for DFC Windows connector policy configuration?

ASANS

BNIST

CEmerging Threats

DCustom and Sourcefire

Answer : D

Cisco Securing Cisco Networks with Sourcefire FireAMP 500-275 SSFAMP Exam Questions