2016/12 New Cisco 500-275: Securing Cisco Networks with Sourcefire FireAMP Endpoints Exam Questions Updated Today!
Free Instant Download 500-275 Exam Dumps (PDF & VCE) 60Q&As from Braindump2go.com Today!
100% Real Exam Questions! 100% Exam Pass Guaranteed!
1.|2016/12 New 500-275 Exam Dumps (PDF & VCE) 60Q&As Download:
http://www.braindump2go.com/500-275.html
2.|2016/12 New 500-275 Exam Questions & Answers:
https://1drv.ms/f/s!AvI7wzKf6QBjgTORnNkRWih6Psy-
QUESTION 11
Which type of activity is shown in the Device Trajectory page?
A. the IP addresses of hosts on which a file was seen
B. the activity of the FireAMP console users
C. the hosts that are in the same group as the selected host
D. file creation
Answer: D
QUESTION 12
Which statement is true about the Device Trajectory feature?
A. It shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.
B. A “plus” sign on the File Trajectory map indicates that you can execute the file inside FireAMP.
C. In the File Trajectory map, you can view the parent process for a file by selecting the infected system.
D. It shows hosts that display Indications of Compromise.
Answer: C
QUESTION 13
When you are viewing information about a computer, what is displayed?
A. the type of antivirus software that is installed
B. the internal IP address
C. when the operating system was installed
D. the console settings
Answer: B
QUESTION 14
How can customers feed new intelligence such as files and hashes to FireAMP?
A. by uploading it to the FTP server
B. from the connector
C. through the management console
D. by sending it via email
Answer: C
QUESTION 15
What is the first system that is infected with a particular malware called?
A. Patient Zero
B. Source
C. Infector
D. Carrier
Answer: A
QUESTION 16
Which information does the File Trajectory feature show?
A. the time that the scan was run
B. the name of the file
C. the hosts on which the file was seen and points in time where events occurred
D. the protocol
Answer: C
QUESTION 17
Which action can you take from the Detections/Quarantine screen?
A. Create a policy.
B. Restore the detected file.
C. Run a report.
D. Change computer group membership.
Answer: B
QUESTION 18
FireAMP reports can be distributed by which mechanism?
A. email
B. cloud sync
C. Windows file share
D. a Crystal Reports subscription
Answer: A
QUESTION 19
In a FireAMP Private Cloud installation, deployed connectors communicate with which server?
A. opadmin.<your domain>.com
B. console.<your domain>.com
C. cloud.<your domain>.com
D. aws.<your domain>.com
Answer: C
QUESTION 20
For connector-to-FireAMP Private Cloud communication, which port number is used for lower-overhead communication?
A. 22
B. 80
C. 443
D. 32137
Answer: D
!!!RECOMMEND!!!
1.Braindump2go|2016/12 New 500-275 Exam Dumps (PDF & VCE) 60Q&As Download:
http://www.braindump2go.com/500-275.html
2.Braindump2go|2016/12 New 500-275 Study Guide:
https://youtu.be/evptKD9ZEYU