Online Access Free 500-285 Practice Test

Which interface type allows for bypass mode?

• A.switched
• B.grouped
• C.inline
• D.routed

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

• A.automatic application bypass
• B.blacklist
• C.thresholds or suppressions
• D.fast-path rules

Alert priority is established in which way?

• A.host criticality selection
• B.event classification
• C.priority.conf file
• D.through Context Explorer

Which statement is true when network traffic meets the criteria specified in a correlation rule?

• A.The network traffic is blocked.
• B.The Defense Center generates a correlation event and initiates any configured responses.
• C.An event is logged to the Correlation Policy Management table.
• D.Nothing happens, because you cannot assign a group of rules to a correlation policy.

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

• A.subscribe to a VRT
• B.upload a list that you create
• C.automatically upload lists from a network share
• D.subscribe to a URL intelligence feed