Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?

Athe directional operator in the rule header

Bthe 'flow' rule option

Cspecification of the source and destination ports in the rule header

DThe detection engine evaluates all sides of a TCP communication regardless of the rule options.

Answer : B

The gateway VPN feature supports which deployment types?

ASSL and HTTPS

BPPTP and MPLS

Cclient and route-based

Dpoint-to-point, star, and mesh

Answer : D

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Afast-path rules

Bthresholds or suppressions

Cblacklist

Dautomatic application bypass

Answer : A

Which interface type allows for VLAN tagging?

Ainline

Bswitched

Chigh-availability link D. passive

Answer : B

Which statement is true concerning static NAT?

AStatic NAT supports only TCP traffic.

BStatic NAT is normally deployed for outbound traffic only.

CStatic NAT provides a one-to-one mapping between IP addresses.

DStatic NAT provides a many-to-one mapping between IP addresses.

Answer : C

Free 500-285 Questions for Cisco 500-285 Exam as PDF & Practice Test Software