500-285 Exam Dumps - Securing Cisco Networks with Sourcefire IPS

The global blacklist universally allows all traffic through the managed device.

The global whitelist cannot be edited.

IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.

The Security Intelligence lists cannot be updated.

The administrator can save the IPS policy with the TCP stream preprocessor turned off, but the rules requiring its operation will not function properly.

When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.

The administrator will be prevented from changing the rule state of the rules that require the TCP stream preprocessor until the TCP stream preprocessor is enabled.

When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the rules that require the TCP stream preprocessor will be turned off for the IPS policy.

rate-based attack prevention

detection enhancement

TCP and network layer preprocessors

performance settings

inline

switched

high-availability link

passive

Static NAT supports only TCP traffic.

Static NAT is normally deployed for outbound traffic only.

Static NAT provides a one-to-one mapping between IP addresses.

Static NAT provides a many-to-one mapping between IP addresses.

System Default Variables and FireSIGHT-Specific Variables

System Default Variables and Procedural Variables

Default Variables and Custom Variables

Policy-Specific Variables and Procedural Variables