Cisco 500-285 SSFIPS Exam Questions Instant Access

Question 1

Which option is a valid whitelist evaluation value?

Apending

Bviolation

Csemi-compliant

Dnot-evaluated

Answer : D

Question 2

A user discovery agent can be installed on which platform?

AOpenLDAP

BWindows

CRADIUS

DUbuntu

Answer : B

Question 3

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Ablock traffic

Bdetermine which users are involved in monitored connections

Cdiscover information about users

Droute traffic

Answer : B

Question 4

Context Explorer can be accessed by a subset of user roles. Which predefined user role is valid for FireSIGHT event access?

AAdministrator

BIntrusion Administrator

CMaintenance User

DDatabase Administrator

Answer : A

Question 5

When you are editing an intrusion policy, how do you know that you have changes?

AThe Commit Changes button is enabled.

BA system message notifies you.

CYou are prompted to save your changes on every screen refresh.

DA yellow, triangular icon displays next to the Policy Information option in the navigation panel.

Answer : D

Question 6

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Afast-path rules

Bthresholds or suppressions

Cblacklist

Dautomatic application bypass

Answer : A

Question 7

Other than navigating to the Network File Trajectory page for a file, which option is an alternative way of accessing the network trajectory of a file?

Afrom Context Explorer

Bfrom the Analysis menu

Cfrom the cloud

Dfrom the Defense Center

Answer : A

Cisco Securing Cisco Networks with Fire-SIGHT Intrusion Prevention System 500-285 SSFIPS Exam Questions