6 Tips For Improved 500-275 practice test

Q1. Which pair represents equivalent processes whose names differ, depending on the connector version that you are running?

A. immunet_protect and iptray

B. agent.exe and sfc.exe

C. TETRA and SPERO

D. ETHOS and SPERO

View Answer

Q2. From the Deployment screen, you can deploy agents via which mechanism?

A. push to client

B. zip install file

C. user download from Sourcefire website or email

D. precompiled RPM package

View Answer

Q3. Which option describes a requirement for using Remote File Fetch?

A. It must be done from a private cloud console.

B. It can be done only over port 32137.

C. The administrator must have two-step authentication enabled.

D. The feature is integrated into the product, so no specific requirements must be fulfilled.

View Answer

Q4. In a FireAMP Private Cloud installation, which server does an administrator use to manage connector policy and view events?

A. opadmin.<your domain>.com

B. console.<your domain>.com

C. cloud.<your domain>.com

D. aws.<your domain>.com

View Answer

Q5. Which set of actions would you take to create a simple custom detection?

A. Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains SHA-256 values.

B. Upload a packet capture; use a Snort rule; use a ClamAV rule.

C. Manually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.

D. Input the file and file name.

View Answer

Q6. Which hosts merit special consideration for crafting a policy?

A. end-user hosts

B. domain controllers

C. Linux servers

D. none, because all hosts should get equal consideration

View Answer