Exit demo 500-260 Cisco ASA Express Security PDF format · free preview

Cisco 500-260 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/500-260.html

Question 1
Single choice

Which security technique should be implemented to remediate after a threat is discovered?

A.

NGIPS ruleset

B.

retrospection

C.

web security deployment

D.

application control

Question 2
Single choice

Refer to the exhibit.

Which statement describes the effect of the configuration?

A.

The SFR is configured to passively inspect traffic on all adaptive security appliance interfaces.

B.

If the SFR fails, redirected traffic that matches the service policy from the outside will be dropped.

C.

If the SFR fails, all traffic from the outside will be dropped.

D.

The SFR is configured as an inline inspector of traffic on all adaptive security appliance interfaces.

Question 3
Single choice

Which option is correct for configuring the SRF for passive, out-of-band traffic evaluation?

A.

sfr fail-close oob

B.

sfr monitor-only

C.

sfr fail-open monitor-only

D.

sfr passive-mode

Question 4
Single choice

An SFR module has been installed in the adaptive security appliance.

Which command must be executed on the module to establish connectivity to FireSIGHT Management Center?

A.

system install manager

B.

config manager fmc host

C.

config manager add

D.

system manager fmc

Question 5
Multiple choice

Which three policy types are configured using Fire SIGHT Management Center? (Choose three.)

A.

remote access

B.

file

C.

health

D.

network discovery

E.

malware

F.

access list

G.

firewall

Question 6
Single choice

Which application is required to enable Microsoft Active Directory identity integration for FirePOWER services?

A.

Sourcefire User Agent

B.

Microsoft Active Directory Manager

C.

Cisco Directory Agent

D.

Microsoft Active Directory Agent

Question 7
Single choice

Which port should be allowed to support communications between Sourcefire User Agent and FireSIGHT Management Center?

A.

TCP/3306

B.

TCP/3389

C.

UDP/3389

D.

TCP/443

Question 8
Single choice

Which access policy action should be applied if traffic is to pass without applying any additional inspection?

A.

trust

B.

allow

C.

permit

D.

monitor

Question 9
Single choice

An access policy that uses URL reputation values is defined.

Which option best describes what happens if a reputation is not available for a URL?

A.

The URL check is not triggered, and the default policy action is applied.

B.

The URL check fails, and the traffic is dropped.

C.

The URL check is unknown, and the traffic is quarantined.

D.

The URL check is not triggered and, by default, the user is prompted to take an action to permit or deny.

Question 10
Single choice

Detection of an exploit kit that is installed on a device is an example of which IoC event category?

A.

security intelligence

B.

IPS

C.

malware

D.

firewall

Showing 10 of 50 questions · Unlock the full set