Question 1

Which rule keyword categorizes alerts into attack classes?

Accepted Answer

A)  class-key 
B)  class-value 
C)  classtype 
D)  alert-class 
A)  class-key 
B)  class-value 
C)  classtype 
D)  alert-class

Question 2

What does the whitelist attribute value "not evaluated" indicate?

Accepted Answer

A)  The host is not a target of the whitelist. 
B)  The host could not be evaluated because no profile exists for it. 
C)  The whitelist status could not be updated because the correlation policy it belongs to is not enabled. 
D)  The host is not on a monitored network segment. 
A)  The host is not a target of the whitelist. 
B)  The host could not be evaluated because no profile exists for it. 
C)  The whitelist status could not be updated because the correlation policy it belongs to is not enabled. 
D)  The host is not on a monitored network segment.

Question 3

Which Cisco Identity Services Engine feature controls access and policies for campuses and branches, wired and wireless devices, and guests, from a single location?

Accepted Answer

A)  centralized policy management 
B)  compliance 
C)  URL filtering 
D)  SSL decryption 
E)  extensive BYOD support 
A)  centralized policy management 
B)  compliance 
C)  URL filtering 
D)  SSL decryption 
E)  extensive BYOD support

Question 4

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Accepted Answer

A) /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0 B) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0 Real 9 Cisco 500-275 Exam C) /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1 D) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1 A) /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0 B) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0 Real 9 Cisco 500-275 Exam C) /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1 D) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1

Question 5

Stacking allows a primary device to utilize which resources of secondary devices?

Accepted Answer

A)  interfaces, CPUs, and memory 
B)  CPUs and memory 
C)  interfaces, CPUs, memory, and storage 
D)  interfaces and storage 
A)  interfaces, CPUs, and memory 
B)  CPUs and memory 
C)  interfaces, CPUs, memory, and storage 
D)  interfaces and storage

Question 6

When configuring an LDAP authentication object, which server type is available?

Accepted Answer

A)  Microsoft Active Directory 
B)  Yahoo 
C)  Oracle 
D)  SMTP 
A)  Microsoft Active Directory 
B)  Yahoo 
C)  Oracle 
D)  SMTP

Question 7

When configuring FireSIGHT detection, an administrator would create a network discovery policy and set the action to "discover". Which option is a possible type of discovery?

Accepted Answer

A)  host 
B)  IPS event 
C)  anti-malware 
D)  networks 
A)  host 
B)  IPS event 
C)  anti-malware 
D)  networks

Question 8

When Snort receives packets, in which order are they placed into the preprocessors?

Accepted Answer

A)  flow, frag3, stream5, application preprocessors, detection engine 
B)  detection engine, frag3, stream5, flow, application preprocessors 
C)  frag3, stream5, application preprocessors, detection engine 
D)  flow, stream5, frag3, application preprocessors, detection engine 
A)  flow, frag3, stream5, application preprocessors, detection engine 
B)  detection engine, frag3, stream5, flow, application preprocessors 
C)  frag3, stream5, application preprocessors, detection engine 
D)  flow, stream5, frag3, application preprocessors, detection engine

Question 9

Which version of libpcap does DAQ require?

Accepted Answer

A)  0.9.8 or later 
B)  1.0.0 or later 
C)  any version 
D)  none 
A)  0.9.8 or later 
B)  1.0.0 or later 
C)  any version 
D)  none

Question 10

How do you configure URL filtering?

Accepted Answer

A)  Add blocked URLs to the global blacklist. 
B)  Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy. 
C)  Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed. 
D)  Create a variable. 
A)  Add blocked URLs to the global blacklist. 
B)  Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy. 
C)  Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed. 
D)  Create a variable.

Question 11

Which file is the primary configuration file for keeping rules up to date?

Accepted Answer

A)  pulled.config 
B)  porker.conf 
C)  snort.conf 
D)  pulledpork.conf 
A)  pulled.config 
B)  porker.conf 
C)  snort.conf 
D)  pulledpork.conf

Question 12

FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

Accepted Answer

A)  protocol layer 
B)  application 
C)  objects 
D)  devices 
A)  protocol layer 
B)  application 
C)  objects 
D)  devices

Question 13

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy?

Accepted Answer

A)  Audit Log 
B)  Users 
C)  Applications 
D)  Business 
A)  Audit Log 
B)  Users 
C)  Applications 
D)  Business

Question 14

Which feature of content security enables administrators to block Facebook videos while allowing posts and messages?

Accepted Answer

A)  dynamic content analysis 
B)  Cisco Application Visibility and Control 
C)  centralized management and reporting 
D)  encryption 
A)  dynamic content analysis 
B)  Cisco Application Visibility and Control 
C)  centralized management and reporting 
D)  encryption

Question 15

The gateway VPN feature supports which deployment types?

Accepted Answer

A)  SSL and HTTPS 
B)  PPTP and MPLS 
C)  client and route-based 
D)  point-to-point, star, and mesh 
A)  SSL and HTTPS 
B)  PPTP and MPLS 
C)  client and route-based 
D)  point-to-point, star, and mesh

Question 16

Custom whitelists are used for which purpose?

Accepted Answer

A)  to specify which files to alert on 
B)  to specify which files to delete 
C)  to specify which files to ignore 
D)  to specify which files to sandbox 
A)  to specify which files to alert on 
B)  to specify which files to delete 
C)  to specify which files to ignore 
D)  to specify which files to sandbox

Question 17

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Accepted Answer

A)  block traffic 
B)  determine which users are involved in monitored connections 
C)  discover information about users 
D)  route traffic 
A)  block traffic 
B)  determine which users are involved in monitored connections 
C)  discover information about users 
D)  route traffic

Question 18

Where do you configure widget properties?

Accepted Answer

A)  dashboard properties 
B)  the Widget Properties button in the title bar of each widget 
C)  the Local Configuration page 
D)  Context Explorer 
A)  dashboard properties 
B)  the Widget Properties button in the title bar of each widget 
C)  the Local Configuration page 
D)  Context Explorer

Question 19

Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

Accepted Answer

A)  logging to database, SMS, SMTP, and SNMP 
B)  logging to database, SMTP, SNMP, and PCAP 
C)  logging to database, SNMP, syslog, and email 
D)  logging to database, PCAP, SMS, and SNMP 
A)  logging to database, SMS, SMTP, and SNMP 
B)  logging to database, SMTP, SNMP, and PCAP 
C)  logging to database, SNMP, syslog, and email 
D)  logging to database, PCAP, SMS, and SNMP

Question 20

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Accepted Answer

A)  testing password strength when accessing an application 
B)  limiting general user access to administrative file shares 
C)  enforcing two-factor authentication for access to critical servers 
D)  issuing an alert if a noncompliant operating system is detected or if a host operating system changes to a noncompliant operating system when it was previously profiled as a compliant one 
A)  testing password strength when accessing an application 
B)  limiting general user access to administrative file shares 
C)  enforcing two-factor authentication for access to critical servers 
D)  issuing an alert if a noncompliant operating system is detected or if a host operating system changes to a noncompliant operating system when it was previously profiled as a compliant one

Exam 47: Designing Cisco Unified Contact Center Enterprise (UCCED)

Which rule keyword categorizes alerts into attack classes?

What does the whitelist attribute value "not evaluated" indicate?

Which Cisco Identity Services Engine feature controls access and policies for campuses and branches, wired and wireless devices, and guests, from a single location?

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Stacking allows a primary device to utilize which resources of secondary devices?

When configuring an LDAP authentication object, which server type is available?

When configuring FireSIGHT detection, an administrator would create a network discovery policy and set the action to "discover". Which option is a possible type of discovery?

When Snort receives packets, in which order are they placed into the preprocessors?

Which version of libpcap does DAQ require?

How do you configure URL filtering?

Which file is the primary configuration file for keeping rules up to date?

FireSIGHT uses three primary types of detection to understand the environment in which it is deployed. Which option is one of the detection types?

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy?

Which feature of content security enables administrators to block Facebook videos while allowing posts and messages?

The gateway VPN feature supports which deployment types?

Custom whitelists are used for which purpose?

In addition to the discovery of new hosts, FireSIGHT can also perform which function?

Where do you configure widget properties?

Which list identifies the possible types of alerts that the Sourcefire System can generate as notification of events or policy violations?

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters