Cisco 500-285 SSFIPS Exam Questions Instant Access

Question 1

Which option is true when configuring an access control rule?

AYou can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.

BYou can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.

CYou can use geolocation criteria to specify source and destination IP addresses by country but not by continent.

DYou can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

Answer : A

Question 2

How do you configure URL filtering?

AAdd blocked URLs to the global blacklist.

BCreate a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

CCreate an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

DCreate a variable.

Answer : C

Question 3

What are the two categories of variables that you can configure in Object Management?

ASystem Default Variables and FireSIGHT-Specific Variables

BSystem Default Variables and Procedural Variables

CDefault Variables and Custom Variables

DPolicy-Specific Variables and Procedural Variables

Answer : C

Question 4

One of the goals of geolocation is to identify which option?

Athe location of any IP address

Bthe location of a MAC address

Cthe location of a TCP connection

Dthe location of a routable IP address

Answer : D

Question 5

Which option transmits policy-based alerts such as SNMP and syslog?

Athe Defense Center

BFireSIGHT

Cthe managed device

Dthe host

Answer : C

Question 6

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Ablock traffic

Bdetermine which users are involved in monitored connections

Cdiscover information about users

Droute traffic

Answer : B

Question 7

When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

AThe protocol is restricted to TCP only.

BThe protocol is restricted to UDP only.

CThe protocol is restricted to TCP or UDP.

DThe protocol is restricted to TCP and UDP.

Answer : C

Cisco Securing Cisco Networks with Fire-SIGHT Intrusion Prevention System 500-285 SSFIPS Exam Questions