Securing Cisco Networks with Sourcefire Intrusion Prevention System

Here you have the best Cisco 500-285 practice exam questions

Question 1 of 60

What are the two categories of variables that you can configure in Object Management?

System Default Variables and FireSIGHT-Specific Variables

System Default Variables and Procedural Variables

Default Variables and Custom Variables

Policy-Specific Variables and Procedural Variables

Correct Answer: C

Question 2 of 60

Which option is true regarding the $HOME_NET variable?

is a policy-level variable

has a default value of "all"

defines the network the active policy protects

is used by all rules to define the internal network

Correct Answer: C

Question 3 of 60

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

subscribe to a URL intelligence feed

subscribe to a VRT

upload a list that you create

automatically upload lists from a network share

Correct Answer: C

Question 4 of 60

Which statement is true in regard to the Sourcefire Security Intelligence lists?

The global blacklist universally allows all traffic through the managed device.

The global whitelist cannot be edited.

IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.

The Security Intelligence lists cannot be updated.

Correct Answer: C

Question 5 of 60

Which statement is true when adding a network to an access control rule?

You can select only source networks.

You must have preconfigured the network as an object.

You can select the source and destination networks or network groups.

You cannot include multiple networks or network groups as sources or destinations.

Correct Answer: C