Free Cisco 500-285 Practice Exam with Questions & Answers

read/write

read-only

Postgres

Estreamer

dashboard properties

the Widget Properties button in the title bar of each widget

the Local Configuration page

Context Explorer

is a policy-level variable

has a default value of "all"

defines the network the active policy protects

is used by all rules to define the internal network

System Default Variables and FireSIGHT-Specific Variables

System Default Variables and Procedural Variables

Default Variables and Custom Variables

Policy-Specific Variables and Procedural Variables

the directional operator in the rule header

the "flow" rule option

specification of the source and destination ports in the rule header

The detection engine evaluates all sides of a TCP communication regardless of the rule options.

preprocessor configurations to define what to do with packets before the detection engine sees them, and detection engine configurations to define exactly how alerting is to take place

a rule statement characterized by the message you configure to appear in the alert, and the rule body that contains all of the matching criteria such as source, destination, and protocol

a rule header to define source, destination, and protocol, and the output configuration to determine which form of output to produce if the rule triggers

a rule body that contains packet-matching criteria or options to define where to look for content in a packet, and a rule header to define matching criteria based on where a packet originates, where it is going, and over which protocol

Administrator

Intrusion Administrator

Maintenance User

Database Administrator

Microsoft Active Directory

Yahoo

Oracle

SMTP

The host is not a target of the whitelist.

The host could not be evaluated because no profile exists for it.

The whitelist status could not be updated because the correlation policy it belongs to is not enabled.

The host is not on a monitored network segment.

testing password strength when accessing an application

limiting general user access to administrative file shares

enforcing two-factor authentication for access to critical servers

issuing an alert if a noncompliant operating system is detected or if a host operating system changes to a noncompliant operating system when it was previously profiled as a compliant one