Cisco 500-275 SSFAMP Exam Questions Instant Access

Question 1

Which statement describes an advantage of cloud-based detection?

ALimited customization allows for faster detection.

BFewer resources are required on the endpoint.

CSandboxing reduces the overall management overhead of the system.

DHigh-speed analytical engines on the endpoint limit the amount of work the cloud must perform.

Answer : B

Question 2

Where is the File Fetch context menu option available?

Aanywhere a filename or SHA-256 hash is displayed

Bonly from the Filter Event View page

Cfrom the Audit Event page

Dfrom the configuration in the Business Defaults page

Answer : A

Question 3

Which pair represents equivalent processes whose names differ, depending on the connector version that you are running?

Aimmunet_protect and iptray

Bagent.exe and sfc.exe

CTETRA and SPERO

DETHOS and SPERO

Answer : B

Question 4

If a file's SHA-256 hash is sent to the cloud, but the cloud has never seen the hash before, which disposition is returned?

AClean

BNeutral

CMalware

DUnavailable

Answer : B

Question 5

In a FireAMP Private Cloud installation, deployed connectors communicate with which server?

Aopadmin.<your domain>.com

Bconsole.<your domain>.com

Ccloud.<your domain>.com

Daws.<your domain>.com

Answer : C

Question 6

Which statement about two-step authentication is true?

AIt is the ability to use two separate passwords.

BIt is the ability to enable biometric authentication.

CIt is the ability to have a passphrase sent to a mobile device.

DIt is the ability to use a verification code in conjunction with the correct username and password.

Answer : D

Question 7

How does application blocking enhance security?

AIt identifies and logs usage.

BIt tracks application abuse.

CIt deletes identified applications.

DIt blocks vulnerable applications from running, until they are patched.

Answer : D

Cisco Securing Cisco Networks with Sourcefire FireAMP 500-275 SSFAMP Exam Questions