Cisco 500-285 - Securing Cisco Networks with Sourcefire IPS Exam
Page: 2 / 12
Total 60 questions
Question #6 (Topic: Topic 2)
Which option is true when configuring an access control rule?
A. You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.
B. You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.
C. You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.
D. You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.
Answer: A
Question #7 (Topic: Topic 2)
Which statement is true when adding a network to an access control rule?
A. You can select only source networks.
B. You must have preconfigured the network as an object.
C. You can select the source and destination networks or network groups.
D. You cannot include multiple networks or network groups as sources or destinations.
Answer: C
Question #8 (Topic: Topic 2)
Which option transmits policy-based alerts such as SNMP and syslog?
A. the Defense Center
B. FireSIGHT
C. the managed device
D. the host
Answer: C
Question #9 (Topic: Topic 2)
Access control policy rules can be configured to block based on the conditions that you
specify in each rule. Which behavior block response do you use if you want to deny and
reset the connection of HTTP traffic that meets the conditions of the access control rule?
specify in each rule. Which behavior block response do you use if you want to deny and
reset the connection of HTTP traffic that meets the conditions of the access control rule?
A. interactive block with reset
B. interactive block
C. block
D. block with reset
Answer: D
Question #10 (Topic: Topic 2)
How do you configure URL filtering?
A. Add blocked URLs to the global blacklist.
B. Create a Security Intelligence object that contains the blocked URLs and add the object
to the access control policy.
C. Create an access control rule and, on the URLs tab, select the URLs or URL categories
that are to be blocked or allowed.
D. Create a variable.
A. Add blocked URLs to the global blacklist.
B. Create a Security Intelligence object that contains the blocked URLs and add the object
to the access control policy.
C. Create an access control rule and, on the URLs tab, select the URLs or URL categories
that are to be blocked or allowed.
D. Create a variable.
Answer: C
Topic 3, Event Analysis
