Question 1

When Snort receives packets, in which order are they placed into the preprocessors?

Accepted Answer

A)   flow, frag3, stream5, application preprocessors, detection engine
B)   detection engine, frag3, stream5, flow, application preprocessors
C)   frag3, stream5, application preprocessors, detection engine
D)   flow, stream5, frag3, application preprocessors, detection engineE) A) and B)
F) B) and D)

Question 2

What does the whitelist attribute value "not evaluated" indicate?

Accepted Answer

A)   The host is not a target of the whitelist.
B)   The host could not be evaluated because no profile exists for it.
C)   The whitelist status could not be updated because the correlation policy it belongs to is not enabled.
D)   The host is not on a monitored network segment.E) None of the above
F) All of the above

Question 3

Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

Accepted Answer

A)   logging to database, SMS, SMTP, and SNMP
B)   logging to database, SMTP, SNMP, and PCAP
C)   logging to database, SNMP, syslog, and email
D)   logging to database, PCAP, SMS, and SNMPE) All of the above
F) C) and D)

Question 4

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Accepted Answer

A)   testing password strength when accessing an application
B)   limiting general user access to administrative file shares
C)   enforcing two-factor authentication for access to critical servers
D)   issuing an alert if a noncompliant operating system is detected or if a host operating system changes to a noncompliant operating system when it was previously profiled as a compliant oneE) All of the above
F) C) and D)

Question 5

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Accepted Answer

A)   block traffic
B)   determine which users are involved in monitored connections
C)   discover information about users
D)   route trafficE) A) and B)
F) C) and D)

Question 6

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy?

Accepted Answer

A)   Audit Log
B)   Users
C)   Applications
D)   BusinessE) A) and D)
F) A) and B)

Question 7

FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

Accepted Answer

A)   protocol layer
B)   application
C)   objects
D)   devicesE) C) and D)
F) B) and C)

Question 8

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Accepted Answer

A) /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0 B) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0 Real 9 Cisco 500-275 Exam C) /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1 D) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1E) A) and D) F) None of the above

Question 9

How do you configure URL filtering?

Accepted Answer

A)   Add blocked URLs to the global blacklist.
B)   Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.
C)   Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.
D)   Create a variable.E) A) and D)
F) None of the above

Question 10

Where do you configure widget properties?

Accepted Answer

A)   dashboard properties
B)   the Widget Properties button in the title bar of each widget
C)   the Local Configuration page
D)   Context ExplorerE) A) and B)
F) C) and D)

Question 11

The gateway VPN feature supports which deployment types?

Accepted Answer

A)   SSL and HTTPS
B)   PPTP and MPLS
C)   client and route-based
D)   point-to-point, star, and meshE) A) and B)
F) C) and D)

Question 12

Which feature of content security enables administrators to block Facebook videos while allowing posts and messages?

Accepted Answer

A)   dynamic content analysis
B)   Cisco Application Visibility and Control
C)   centralized management and reporting
D)   encryptionE) A) and D)
F) B) and C)

Question 13

Which rule keyword categorizes alerts into attack classes?

Accepted Answer

A)   class-key
B)   class-value
C)   classtype
D)   alert-classE) A) and D)
F) B) and D)

Question 14

When configuring an LDAP authentication object, which server type is available?

Accepted Answer

A)   Microsoft Active Directory
B)   Yahoo
C)   Oracle
D)   SMTPE) C) and D)
F) None of the above

Question 15

Which file is the primary configuration file for keeping rules up to date?

Accepted Answer

A)   pulled.config
B)   porker.conf
C)   snort.conf
D)   pulledpork.confE) A) and B)
F) None of the above

Question 16

Custom whitelists are used for which purpose?

Accepted Answer

A)   to specify which files to alert on
B)   to specify which files to delete
C)   to specify which files to ignore
D)   to specify which files to sandboxE) All of the above
F) B) and C)

Question 17

When configuring FireSIGHT detection, an administrator would create a network discovery policy and set the action to "discover". Which option is a possible type of discovery?

Accepted Answer

A)   host
B)   IPS event
C)   anti-malware
D)   networksE) B) and C)
F) None of the above

Question 18

Which Cisco Identity Services Engine feature controls access and policies for campuses and branches, wired and wireless devices, and guests, from a single location?

Accepted Answer

A)   centralized policy management
B)   compliance
C)   URL filtering
D)   SSL decryption
E)   extensive BYOD supportF) C) and D)
G) A) and D)

Question 19

Which version of libpcap does DAQ require?

Accepted Answer

A)   0.9.8 or later
B)   1.0.0 or later
C)   any version
D)   noneE) A) and D)
F) None of the above

Question 20

Stacking allows a primary device to utilize which resources of secondary devices?

Accepted Answer

A)   interfaces, CPUs, and memory
B)   CPUs and memory
C)   interfaces, CPUs, memory, and storage
D)   interfaces and storageE) A) and B)
F) None of the above

Exam 47: Designing Cisco Unified Contact Center Enterprise (UCCED)

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Correct AnswerverifiedShow Answer

Which rule keyword categorizes alerts into attack classes?

Correct AnswerverifiedShow Answer

FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

Correct AnswerverifiedShow Answer

Which Cisco Identity Services Engine feature controls access and policies for campuses and branches, wired and wireless devices, and guests, from a single location?

Correct AnswerverifiedShow Answer

Where do you configure widget properties?

Correct AnswerverifiedShow Answer

What does the whitelist attribute value "not evaluated" indicate?

Correct AnswerverifiedShow Answer

How do you configure URL filtering?

Correct AnswerverifiedShow Answer

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Correct AnswerverifiedShow Answer

Which feature of content security enables administrators to block Facebook videos while allowing posts and messages?

Correct AnswerverifiedShow Answer

Which version of libpcap does DAQ require?

Correct AnswerverifiedShow Answer

When configuring an LDAP authentication object, which server type is available?

Correct AnswerverifiedShow Answer

Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

Correct AnswerverifiedShow Answer

Custom whitelists are used for which purpose?

Correct AnswerverifiedShow Answer

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy?

Correct AnswerverifiedShow Answer

Stacking allows a primary device to utilize which resources of secondary devices?

Correct AnswerverifiedShow Answer

Which file is the primary configuration file for keeping rules up to date?

Correct AnswerverifiedShow Answer

When Snort receives packets, in which order are they placed into the preprocessors?

Correct AnswerverifiedShow Answer

The gateway VPN feature supports which deployment types?

Correct AnswerverifiedShow Answer

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Correct AnswerverifiedShow Answer

When configuring FireSIGHT detection, an administrator would create a network discovery policy and set the action to "discover". Which option is a possible type of discovery?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified