Cisco 500-285 SSFIPS Exam Questions Instant Access

Question 1

The IP address ::/0 is equivalent to which IPv4 address and netmask?

A0.0.0.0

B0.0.0.0/0

C0.0.0.0/24

DThe IP address ::/0 is not valid IPv6 syntax.

Answer : B

Question 2

Which interface type allows for bypass mode?

Ainline

Bswitched

Crouted

Dgrouped

Answer : A

Question 3

Context Explorer can be accessed by a subset of user roles. Which predefined user role is not valid for FireSIGHT event access?

AAdministrator

BIntrusion Administrator

CSecurity Analyst

DSecurity Analyst (Read-Only)

Answer : B

Question 4

How do you configure URL filtering?

AAdd blocked URLs to the global blacklist.

BCreate a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

CCreate an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

DCreate a variable.

Answer : C

Question 5

Which statement is true regarding malware blocking over HTTP?

AIt can be done only in the download direction.

BIt can be done only in the upload direction.

CIt can be done in both the download and upload direction.

DHTTP is not a supported protocol for malware blocking.

Answer : C

Question 6

The collection of health modules and their settings is known as which option?

Aappliance policy

Bsystem policy

Ccorrelation policy

Dhealth policy

Answer : D

Question 7

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

Asubscribe to a URL intelligence feed

Bsubscribe to a VRT

Cupload a list that you create

Dautomatically upload lists from a network share

Answer : C

Cisco Securing Cisco Networks with Fire-SIGHT Intrusion Prevention System 500-285 SSFIPS Exam Questions