Free Cisco 500-285 Exam Dumps Questions & Answers

Which statement is true when adding a network to an access control rule?

• A.  You must have preconfigured the network as an object.
• B.  You can select the source and destination networks or network groups.
• C.  You can select only source networks.
• D.  You cannot include multiple networks or network groups as sources or destinations.

FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

• A.  devices
• B.  protocol layer
• C.  objects
• D.  application

Which statement regarding user exemptions is true?

• A.  Non-administrators can be made exempt on an individual basis.
• B.  By default, all users cannot be exempt from any browser session timeout value.
• C.  Administrators can be exempt from any browser session timeout value.
• D.  Exempt users have a browser session timeout restriction of 24 hours.

Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?

• A.  specification of the source and destination ports in the rule header
• B.  the directional operator in the rule header
• C.  the "flow" rule option
• D.  The detection engine evaluates all sides of a TCP communication regardless of the rule options.

Stacking allows a primary device to utilize which resources of secondary devices?

• A.  interfaces, CPUs, memory, and storage
• B.  interfaces, CPUs, and memory
• C.  interfaces and storage
• D.  CPUs and memory