500-290 Exam Questions

Which rating is determined by adjusting the risk rating with respect to preventative actions taken by the sensor?

Stacking allows a primary device to utilize which resources of secondary devices?

Which three statements are true with respect to IPS false positives? (Choose three.)

Which Cisco IPS appliance signature engine uses signature events as input to correlate different signatures into a higher level event?

Which application within the Cisco IPS appliance can modify the configurations of other devices on the network?

Which interface type allows for bypass mode?

Which interface type allows for VLAN tagging?

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Which option is a valid whitelist evaluation value?

What does the whitelist attribute value "not evaluated" indicate?

Which option describes Spero file analysis?

Which statement is true regarding malware blocking over HTTP?

Which policy controls malware blocking configuration?

What is the maximum timeout value for a browser session?

Which statement regarding user exemptions is true?

Which Cisco IPS appliance feature has the following three potential settings: off, partial, and full?

Which option is not a characteristic of dashboard widgets or Context Explorer?

Which option is true of the Packet Information portion of the Packet View screen?

When you are editing an intrusion policy, how do you know that you have changes?

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?