Online Access Free 500-290 Practice Test

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

• A.fast-path rules
• B.blacklist
• C.automatic application bypass
• D.thresholds or suppressions

What does packet latency thresholding measure?

• A.the time span between a triggered event and when the packet is dropped
• B.the amount of time it takes for a rule to process
• C.the amount of time it takes to process an event
• D.the total elapsed time it takes to process a packet

Which option is true regarding the $HOME_NET variable?

• A.is a policy-level variable
• B.defines the network the active policy protects
• C.is used by all rules to define the internal network
• D.has a default value of "all"

Which statement is true in regard to the Sourcefire Security Intelligence lists?

• A.IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.
• B.The Security Intelligence lists cannot be updated.
• C.The global whitelist cannot be edited.
• D.The global blacklist universally allows all traffic through the managed device.

Which option is used to implement suppression in the Rule Management user interface?

• A.Source
• B.Protocol
• C.Global
• D.Rule Category