Cisco 500-285 Securing Cisco Networks with Sourcefire IPS Exam Practice Test

the rule group accordion

a filter bar

a link below the preprocessor heading

a button next to each preprocessor option that has a corresponding rule

The administrator can save the IPS policy with the TCP stream preprocessor turned off, but the rules requiring its operation will not function properly.

When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the TCP stream preprocessor will be turned on for the IPS policy.

The administrator will be prevented from changing the rule state of the rules that require the TCP stream preprocessor until the TCP stream preprocessor is enabled.

When the administrator enables the rules and then attempts to save the IPS policy, the administrator will be prompted to accept that the rules that require the TCP stream preprocessor will be turned off for the IPS policy.

is a policy-level variable

has a default value of "all"

defines the network the active policy protects

is used by all rules to define the internal network

subscribe to a URL intelligence feed

subscribe to a VRT

upload a list that you create

automatically upload lists from a network share

connection event table view

network profile

host profile

authentication objects

a default whitelist

a default traffic profile

a host attribute

a correlation policy

event classification

priority.conf file

host criticality selection

through Context Explorer

preprocessor configurations to define what to do with packets before the detection engine sees them, and detection engine configurations to define exactly how alerting is to take place

a rule statement characterized by the message you configure to appear in the alert, and the rule body that contains all of the matching criteria such as source, destination, and protocol

a rule header to define source, destination, and protocol, and the output configuration to determine which form of output to produce if the rule triggers

a rule body that contains packet-matching criteria or options to define where to look for content in a packet, and a rule header to define matching criteria based on where a packet originates, where it is going, and over which protocol

It can be done only in the download direction.

It can be done only in the upload direction.

It can be done in both the download and upload direction.

HTTP is not a supported protocol for malware blocking.