500-285 無料問題集「Cisco Securing Cisco Networks with Sourcefire Intrusion Prevention System」

（A）You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.

（B）You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.

（C）You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

（D）You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.

（A）defines the network the active policy protects

（B）is a policy-level variable

（C）has a default value of "all"

（D）is used by all rules to define the internal network

（A）It can be done only in the download direction.

（B）HTTP is not a supported protocol for malware blocking.

（C）It can be done only in the upload direction.

（D）It can be done in both the download and upload direction.

（A）the directional operator in the rule header

（B）The detection engine evaluates all sides of a TCP communication regardless of the rule options.

（C）specification of the source and destination ports in the rule header

（D）the "flow" rule option

（A）The Defense Center generates a correlation event and initiates any configured responses.

（B）The network traffic is blocked.

（C）An event is logged to the Correlation Policy Management table.

（D）Nothing happens, because you cannot assign a group of rules to a correlation policy.

（A）port scan

（B）portsweep

（C）ACK scan

（D）decoy port scan