Cisco 500-275 SSFAMP Exam Questions Instant Access

Question 1

If a file's SHA-256 hash is sent to the cloud, but the cloud has never seen the hash before, which disposition is returned?

AClean

BNeutral

CMalware

DUnavailable

Answer : B

Question 2

Advanced custom signatures are written using which type of syntax?

ASnort signatures

BFirewall signatures

CClamAV signatures

Dbash shell

Answer : C

Question 3

What is the default command-line switch configuration, if you run a connector installation with no parameters?

A<installer package name> /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0

B<installer package name> /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0

C<installer package name> /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1

D<installer package name> /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1

Answer : A

Question 4

For connector-to-FireAMP Private Cloud communication, which port number is used for lower-overhead communication?

A22

B80

C443

D32137

Answer : D

Question 5

Which statement about two-step authentication is true?

AIt is the ability to use two separate passwords.

BIt is the ability to enable biometric authentication.

CIt is the ability to have a passphrase sent to a mobile device.

DIt is the ability to use a verification code in conjunction with the correct username and password.

Answer : D

Question 6

Incident responders use which policy mode for outbreak control?

AAudit

BProtect

CTriage

DEmergency

Answer : C

Question 7

Where is the File Fetch context menu option available?

Aanywhere a filename or SHA-256 hash is displayed

Bonly from the Filter Event View page

Cfrom the Audit Event page

Dfrom the configuration in the Business Defaults page

Answer : A

Cisco Securing Cisco Networks with Sourcefire FireAMP 500-275 SSFAMP Exam Questions