Cisco Securing Cisco Networks with Fire-SIGHT Intrusion Prevention System 500-285 Exam Questions

Preparing for the 500-285 exam is simple with Certs Vault. We offer easy-to-understand study materials that help you learn the most important exam topics. You can study using our PDF questions, practice online with a real exam-style test, or use the desktop practice software. Choose the study method that works best for you and prepare at your own pace.

At Certs Vault, we keep our 500-285 practice questions up to date. Whenever the exam syllabus or objectives change, we update our study materials so you always learn the latest topics. This helps you save time, avoid outdated content, and feel more confident when you take your exam.

Question #1 (Topic: demo questions)

When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

The protocol is restricted to TCP only.

The protocol is restricted to UDP only.

The protocol is restricted to TCP or UDP.

The protocol is restricted to TCP and UDP

Correct Answer: C

Explanation not available for this question.

Question #2 (Topic: demo questions)

How do you configure URL filtering?

Add blocked URLs to the global blacklist.

Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

Create a variable.

Correct Answer: C

Explanation not available for this question.

Question #3 (Topic: demo questions)

Which statement is true in regard to the Sourcefire Security Intelligence lists

The global blacklist universally allows all traffic through the managed device.

The global whitelist cannot be edited.

IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.

The Security Intelligence lists cannot be updated.

Correct Answer: C

Explanation not available for this question.

Question #4 (Topic: demo questions)

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

subscribe to a URL intelligence feed

subscribe to a VRT

upload a list that you create

automatically upload lists from a network share

Correct Answer: C

Explanation not available for this question.

Question #5 (Topic: demo questions)

Which option is true regarding the $HOME_NET variable?

is a policy-level variable

has a default value of "all"

defines the network the active policy protects

is used by all rules to define the internal network

Correct Answer: C

Explanation not available for this question.

Page: 1 / 1