Which question should be in your predeployment checklist? A. How often are backup jobs run? B. Are any Linux servers being deployed? C. Who are the users of the hosts on which you will deploy? D. Which applications are installed…
Incident responders use which policy mode for outbreak control? A. Audit Real 8 Cisco 500-275 Exam B. Protect C. Triage D. Emergency
Which statement represents a best practice for deploying on Windows servers? A. You should treat Windows servers like any other host in the deployment. B. You should obtain the Microsoft TechNet article that describes the proper exclusions for Windows servers.…
Which hosts merit special consideration for crafting a policy? A. end-user hosts B. domain controllers C. Linux servers D. none, because all hosts should get equal consideration
What is a valid data source for DFC Windows connector policy configuration? A. SANS B. NIST Real 7 Cisco 500-275 Exam C. Emerging Threats D. Custom and Sourcefire
Advanced custom signatures are written using which type of syntax? A. Snort signatures B. Firewall signatures C. ClamAV signatures D. bash shell
Which set of actions would you take to create a simple custom detection? A. Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains SHA-256 values. B. Upload a packet capture; use…
Where is the File Fetch context menu option available? A. anywhere a filename or SHA-256 hash is displayed B. only from the Filter Event View page C. from the Audit Event page D. from the configuration in the Business Defaults…
Which option describes a requirement for using Remote File Fetch? A. It must be done from a private cloud console. B. It can be done only over port 32137. C. The administrator must have two-step authentication enabled. D. The feature…
Which option represents a configuration step on first use? Real 16 Cisco 500-275 Exam A. Verify, Contain, and Protect B. User Account Setup C. System Defaults Configuration D. Event Filtering