Which interface type allows for bypass mode?

Ainline

Bswitched

Crouted

Dgrouped

Answer : A

Which statement is true in regard to the Sourcefire Security Intelligence lists?

AThe global blacklist universally allows all traffic through the managed device.

BThe global whitelist cannot be edited.

CIP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.

DThe Security Intelligence lists cannot be updated.

Answer : C

How do you configure URL filtering?

AAdd blocked URLs to the global blacklist.

BCreate a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.

CCreate an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.

DCreate a variable.

Answer : C

When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

AThe protocol is restricted to TCP only.

BThe protocol is restricted to UDP only.

CThe protocol is restricted to TCP or UDP.

DThe protocol is restricted to TCP and UDP.

Answer : C

The IP address ::/0 is equivalent to which IPv4 address and netmask?

A0.0.0.0

B0.0.0.0/0

C0.0.0.0/24

DThe IP address ::/0 is not valid IPv6 syntax.

Answer : B

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Ablock traffic

Bdetermine which users are involved in monitored connections

Cdiscover information about users

Droute traffic

Answer : B

Free 500-285 Questions for Cisco 500-285 Exam as PDF & Practice Test Software