Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

500-285 by Cisco - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 56

1 2 3

→

Know a question that should be here? Contribute to this exam

Which statement is true when adding a network to an access control rule?

A You can select only source networks.
B You must have preconfigured the network as an object.
C You can select the source and destination networks or network groups.
D You cannot include multiple networks or network groups as sources or destinations.

Which option is true when configuring an access control rule?

A You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.
B You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.
C You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.
D You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

How do you configure URL filtering?

A Add blocked URLs to the global blacklist.
B Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.
C Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.
D Create a variable.

When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

A The protocol is restricted to TCP only.
B The protocol is restricted to UDP only.
C The protocol is restricted to TCP or UDP.
D The protocol is restricted to TCP and UDP.

Access control policy rules can be configured to block based on the conditions that you specify in each rule. Which behavior block response do you use if you want to deny and reset the connection of HTTP traffic that meets the conditions of the access control rule?

A interactive block with reset
B interactive block
C block Real 4
D block with reset

Which option transmits policy-based alerts such as SNMP and syslog?

A the Defense Center
B FireSIGHT
C the managed device
D the host

When you are editing an intrusion policy, how do you know that you have changes?

A The Commit Changes button is enabled.
B A system message notifies you.
C You are prompted to save your changes on every screen refresh.
D A yellow, triangular icon displays next to the Policy Information option in the navigation panel.

One of the goals of geolocation is to identify which option?

A the location of any IP address
B the location of a MAC address
C the location of a TCP connection
D the location of a routable IP address

Which option is not a characteristic of dashboard widgets or Context Explorer?

A Context Explorer is a tool used primarily by analysts looking for trends across varying periods of time.
B Context Explorer can be added as a widget to a dashboard. Real 5
C Widgets offer users an at-a-glance view of their environment.
D Widgets are offered to all users, whereas Context Explorer is limited to a few roles.

Which option is true of the Packet Information portion of the Packet View screen?

A provides a table view of events
B allows you to download a PCAP formatted file of the session that triggered the event
C displays packet data in a format based on TCP/IP layers
D shows you the user that triggered the event

FireSIGHT recommendations appear in which layer of the Policy Layers page?

A Layer Summary
B User Layers
C Built-In Layers
D FireSIGHT recommendations do not show up as a layer.

Which option is used to implement suppression in the Rule Management user interface?

A Rule Category
B Global Real 6
C Source
D Protocol