Cisco 500-285 - Securing Cisco Networks with Sourcefire IPS Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: Topic 3)
Which option is true of the Packet Information portion of the Packet View screen?
A. provides a table view of events
B. allows you to download a PCAP formatted file of the session that triggered the event
C. displays packet data in a format based on TCP/IP layers
D. shows you the user that triggered the event
Answer: C
Question #12 (Topic: Topic 3)
Which option is not a characteristic of dashboard widgets or Context Explorer?
A. Context Explorer is a tool used primarily by analysts looking for trends across varying periods of time.
B. Context Explorer can be added as a widget to a dashboard.
C. Widgets offer users an at-a-glance view of their environment.
D. Widgets are offered to all users, whereas Context Explorer is limited to a few roles.
Answer: B
Question #13 (Topic: Topic 3)
One of the goals of geolocation is to identify which option?
A. the location of any IP address
B. the location of a MAC address
C. the location of a TCP connection
D. the location of a routable IP address
A. the location of any IP address
B. the location of a MAC address
C. the location of a TCP connection
D. the location of a routable IP address
Answer: D
Topic 4, IPS Policy Basics
Question #14 (Topic: Topic 4)
FireSIGHT recommendations appear in which layer of the Policy Layers page?
A. Layer Summary
B. User Layers
C. Built-In Layers
D. FireSIGHT recommendations do not show up as a layer.
Answer: C
Question #15 (Topic: Topic 4)
When you are editing an intrusion policy, how do you know that you have changes?
A. The Commit Changes button is enabled.
B. A system message notifies you.
C. You are prompted to save your changes on every screen refresh.
D. A yellow, triangular icon displays next to the Policy Information option in the navigation panel.
Answer: D
