Cisco 500-275 SSFAMP Exam Practice Test Instant Access

Question 1

Where does an administrator go to get a copy of a fetched file?

Athe Business Defaults page

Bthe File menu, followed by Downloads

Cthe File Repository

Dthe Search selection in the Analysis menu

Answer : C

Question 2

Where is the File Fetch context menu option available?

Aanywhere a filename or SHA-256 hash is displayed

Bonly from the Filter Event View page

Cfrom the Audit Event page

Dfrom the configuration in the Business Defaults page

Answer : A

Question 3

Which option describes a requirement for using Remote File Fetch?

AIt must be done from a private cloud console.

BIt can be done only over port 32137.

CThe administrator must have two-step authentication enabled.

DThe feature is integrated into the product, so no specific requirements must be fulfilled.

Answer : C

Question 4

Which option represents a configuration step on first use?

AVerify, Contain, and Protect

BUser Account Setup

CSystem Defaults Configuration

DEvent Filtering

Answer : A

Question 5

Which FireAMP capability can tell you how malware has spread in a network?

AFile Analysis

BThreat Root Cause

CFile Trajectory

DHeat Map

Answer : C

Question 6

Which pair represents equivalent processes whose names differ, depending on the connector version that you are running?

Aimmunet_protect and iptray

Bagent.exe and sfc.exe

CTETRA and SPERO

DETHOS and SPERO

Answer : B

Question 7

Which tool can you use to query the history.db file?

ACurl

BFireAMP_Helper.vbs

Ccscript

DSQLite

Answer : D

Cisco 500-275 Securing Cisco Networks with Sourcefire FireAMP SSFAMP Exam Practice Test