500-275 무료 덤프문제 온라인 액세스

Which set of actions would you take to create a simple custom detection?

• A.Upload a packet capture; use a Snort rule; use a ClamAV rule.
• B.Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains SHA-256 values.
• C.Input the file and file name.
• D.Manually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.

Which action can you take from the Detections/Quarantine screen?

• A.Restore the detected file.
• B.Create a policy.
• C.Change computer group membership.
• D.Run a report.

Where is the File Fetch context menu option available?

• A.anywhere a filename or SHA-256 hash is displayed
• B.from the Audit Event page
• C.only from the Filter Event View page
• D.from the configuration in the Business Defaults page

Which statement represents a best practice for deploying on Windows servers?

• A.You should obtain the Microsoft TechNet article that describes the proper exclusions for Windows servers.
• B.You should deploy FireAMP connectors only alongside existing antivirus software on Windows servers.
• C.You should treat Windows servers like any other host in the deployment.
• D.You should never configure exclusions for Windows servers.

File information is sent to the Sourcefire Collective Security Intelligence Cloud using which format?

• A.SHA-256
• B.MD5
• C.filenames
• D.SHA-1