Securing Cisco Networks with Sourcefire Intrusion Prevention System (500-285) Free Practice Test

Question 1

Suppose an administrator is configuring an IPS policy and attempts to enable intrusion rules that require the operation of the TCP stream preprocessor, but the TCP stream preprocessor is turned off. Which statement is true in this situation?

A. When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the rules that require the TCP stream preprocessor will be turned off for the IPS policy.

B. The administrator can save the IPS policy with the TCP stream preprocessor turned off, but the rules requiring its operation will not function properly.

C. When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.

D. The administrator will be prevented from changing the rule state of the rules that require the TCP stream preprocessor until the TCP stream preprocessor is enabled.

Correct Answer: C

Question 2

A user discovery agent can be installed on which platform?

A. OpenLDAP

B. RADIUS

C. Windows

D. Ubuntu

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

A. upload a list that you create

B. automatically upload lists from a network share

C. subscribe to a URL intelligence feed

D. subscribe to a VRT

Correct Answer: A

Question 4

What is the maximum timeout value for a browser session?

A. 60 minutes

B. 120 minutes

C. 1440 minutes

D. 1024 minutes

Correct Answer: C

Question 5

Which policy controls malware blocking configuration?

A. access control policy

B. IPS policy

C. malware policy

D. file policy

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which interface type allows for bypass mode?

A. routed

B. grouped

C. switched

D. inline

Correct Answer: D

Welcome to TestSimulate

Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System (500-285) Free Practice Test