Cisco Exam 500-285 Topic 2 Question 59 Discussion

Actual exam question for Cisco's 500-285 exam

Question #: 59
Topic #: 2

[All 500-285 Questions]

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

Asubscribe to a URL intelligence feed

Bsubscribe to a VRT

Cupload a list that you create

Dautomatically upload lists from a network share

Show Suggested Answer

Suggested Answer: C

by Emerson at May 09, 2024, 03:18 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

1 years ago

True, C covers more aspects. Just logging the event like D wouldn't be enough.

upvoted 0 times

...

1 years ago

I was confused too. But C seems more comprehensive with event and response.

upvoted 0 times

...

1 years ago

I thought B made sense—network traffic is blocked.

upvoted 0 times

...

1 years ago

I went with C. The Defense Center generates a correlation event.

upvoted 0 times

...

1 years ago

Yeah, that was tricky. What did you put?

upvoted 0 times

...

1 years ago

Hey, did you see that question about correlation rules?

upvoted 0 times

...