Cisco 500-285 Exam Questions

Question 6 of 60

Which option is true when configuring an access control rule?

You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.

You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.

You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.

You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

Correct Answer: A

Question 7 of 60

How do you configure URL filtering?

Add blocked URLs to the global blacklist.

Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

Create a variable.

Correct Answer: C

Question 8 of 60

When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

The protocol is restricted to TCP only.

The protocol is restricted to UDP only.

The protocol is restricted to TCP or UDP.

The protocol is restricted to TCP and UDP.

Correct Answer: C

Question 9 of 60

Access control policy rules can be configured to block based on the conditions that you specify in each rule. Which behavior block response do you use if you want to deny and reset the connection of HTTP traffic that meets the conditions of the access control rule?

interactive block with reset

interactive block

block Real 4

block with reset

Correct Answer: D

Question 10 of 60

Which option transmits policy-based alerts such as SNMP and syslog?

the Defense Center

FireSIGHT

the managed device

the host

Correct Answer: C