Free 500-275 – Securing Cisco Networks with Sourcefire FireAMP Endpoints Practice Test Question

Select an option, then click Submit answer.

• ○

  anywhere a filename or SHA-256 hash is displayed

• ○

  only from the Filter Event View page

• ○

  from the Audit Event page

• ○

  from the configuration in the Business Defaults page
  
  

Select an option, then click Submit answer.

• ○

  100 connectors over a 15-day period

• ○

  1000 connectors over a 45-day period

• ○

  5000 connectors over a 10-day period

• ○

  500 connectors over a 30-day period

Select an option, then click Submit answer.

• ○

  Clean

• ○

  Neutral

• ○

  Malware

• ○

  Unavailable
  
  

Select an option, then click Submit answer.

• ○

  the Apple Authenticator app

• ○

  the Google Authenticator app

• ○

  a SecurID token

• ○

  any RFC 1918 compatible application
  
  

Select an option, then click Submit answer.

• ○

  Vulnerabilities

• ○

  Enforcement of usage policies

• ○

  File operations

• ○

  Authentication activity
  
  

Select an option, then click Submit answer.

• ○

  It shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.

• ○

  A "plus" sign on the File Trajectory map indicates that you can execute the file inside FireAMP.

• ○

  In the File Trajectory map, you can view the parent process for a file by selecting the infected system.

• ○

  It shows hosts that display Indications of Compromise.
  
  

Select an option, then click Submit answer.

• ○

  How often are backup jobs run?

• ○

  Are any Linux servers being deployed?

• ○

  Who are the users of the hosts on which you will deploy?

• ○

  Which applications are installed on the hosts on which you will deploy?
  
  

Select an option, then click Submit answer.

• ○

  Signatures are pushed to endpoints more quickly than other antivirus products.

• ○

  Superior detection algorithms on the endpoint limit the amount of work the cloud must perform.

• ○

  It provides enterprise visibility.

• ○

  It relies on sandboxing.
  
  

Select an option, then click Submit answer.

• ○

  specify a custom whitelist

• ○

  specify group membership

• ○

  specify hosts to include in reports

• ○

  specify which events to view
  
  

Select an option, then click Submit answer.

• ○

  Verify, Contain, and Protect

• ○

  User Account Setup

• ○

  System Defaults Configuration

• ○

  Event Filtering