1. Home
  2. Cisco
  3. 500-275

Securing Cisco Networks with Sourcefire FireAMP Endpoints (SSFAMP)

Exam Details

  • Exam Code
    :500-275
  • Exam Name
    :Securing Cisco Networks with Sourcefire FireAMP Endpoints (SSFAMP)
  • Certification
    :Cisco Certifications
  • Vendor
    :Cisco
  • Total Questions
    :50 Q&As
  • Last Updated
    :Mar 18, 2025

Cisco Cisco Certifications 500-275 Questions & Answers

  • Question 21:

    Which type of activity is shown in the Device Trajectory page?

    A. the IP addresses of hosts on which a file was seen

    B. the activity of the FireAMP console users

    C. the hosts that are in the same group as the selected host

    D. file creation

  • Question 22:

    Which statement is true about the Device Trajectory feature?

    A. It shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.

    B. A "plus" sign on the File Trajectory map indicates that you can execute the file inside FireAMP.

    C. In the File Trajectory map, you can view the parent process for a file by selecting the infected system.

    D. It shows hosts that display Indications of Compromise.

  • Question 23:

    What is the first system that is infected with a particular malware called?

    A. Patient Zero

    B. Source

    C. Infector

    D. Carrier

  • Question 24:

    Which action can you take from the Detections/Quarantine screen?

    A. Create a policy.

    B. Restore the detected file.

    C. Run a report.

    D. Change computer group membership.

  • Question 25:

    What is the default command-line switch configuration, if you run a connector installation with no parameters?

    A. /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0

    B. /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0

    C. /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1

    D. /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1

  • Question 26:

    When you are viewing information about a computer, what is displayed?

    A. the type of antivirus software that is installed

    B. the internal IP address

    C. when the operating system was installed

    D. the console settings

  • Question 27:

    Which question should be in your predeployment checklist?

    A. How often are backup jobs run?

    B. Are any Linux servers being deployed?

    C. Who are the users of the hosts on which you will deploy?

    D. Which applications are installed on the hosts on which you will deploy?

  • Question 28:

    From the Deployment screen, you can deploy agents via which mechanism?

    A. push to client

    B. .zip install file

    C. user download from Sourcefire website or email

    D. precompiled RPM package

  • Question 29:

    Which statement represents a best practice for deploying on Windows servers?

    A. You should treat Windows servers like any other host in the deployment.

    B. You should obtain the Microsoft TechNet article that describes the proper exclusions for Windows servers.

    C. You should never configure exclusions for Windows servers.

    D. You should deploy FireAMP connectors only alongside existing antivirus software on Windows servers.

  • Question 30:

    Incident responders use which policy mode for outbreak control?

    A. Audit

    B. Protect

    C. Triage

    D. Emergency

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 500-275 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.