Cisco Exam 500-285 Topic 3 Question 69 Discussion

Actual exam question for Cisco's 500-285 exam

Question #: 69
Topic #: 3

Correlation policy rules allow you to construct criteria for alerting on very specific conditions. Which option is an example of such a rule?

Atesting password strength when accessing an application

Blimiting general user access to administrative file shares

Cenforcing two-factor authentication for access to critical servers

Dissuing an alert if a noncompliant operating system is detected or if a host operating system changes to a noncompliant operating system when it was previously profiled as a compliant one

Show Suggested Answer

Suggested Answer: D

by Paulina at Sep 15, 2024, 07:27 AM

Limited Time Offer

25%

Off

Get Premium 500-285 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Peggie

8 months ago

Two-factor auth for critical servers? Psh, that's child's play. Real security pros go for the advanced OS detection rules, like option D.

upvoted 0 times

Page

7 months ago

It's all about having multiple layers of security measures in place.

upvoted 0 times

...

Oren

7 months ago

Two-factor authentication is important too, but option D covers a wider range of potential threats.

upvoted 0 times

...

Willie

8 months ago

Yeah, detecting noncompliant operating systems is crucial for security.

upvoted 0 times

...

Stefany

8 months ago

I agree, option D is definitely a more advanced rule.

upvoted 0 times

...

Krissy

8 months ago

Haha, can you imagine someone trying to use the password strength test as a correlation rule? That's like using a fork to eat soup!

upvoted 0 times

Albina

8 months ago

C) enforcing two-factor authentication for access to critical servers

upvoted 0 times

...

Malcolm

8 months ago

B) limiting general user access to administrative file shares

upvoted 0 times

...

Tawna

8 months ago

A) testing password strength when accessing an application

upvoted 0 times

...

Bethanie

8 months ago

D is the way to go. Gotta keep a close eye on those sneaky OS changes, you know?

upvoted 0 times

...

Ollie

9 months ago

I'm going with D as well. That's the only one that really covers the 'very specific conditions' part of the question.

upvoted 0 times

Fernanda

7 months ago

I agree, D is the only one that fits the criteria for a correlation policy rule.

upvoted 0 times

...

Ena

8 months ago

Yeah, D seems to be the best choice for a very specific condition.

upvoted 0 times

...

Goldie

8 months ago

I think D is the correct option. It's the most specific one.

upvoted 0 times

...

Laila

9 months ago

I'm not sure, but I think option C could also be a valid example of a correlation policy rule.

upvoted 0 times

...

Mertie

9 months ago

I agree with Kendra, option D seems to be the most specific condition for alerting.

upvoted 0 times

...

Kendra

9 months ago

I think option D is an example of a correlation policy rule.

upvoted 0 times

...

Paola

9 months ago

Option D sounds like the most specific and comprehensive rule to me. Catching noncompliant OS changes would be super useful.

upvoted 0 times

Kip

8 months ago

Testing password strength when accessing an application, like in option A, is also crucial for security measures.

upvoted 0 times

...

Lindsey

8 months ago

I think option C is also important, enforcing two-factor authentication for critical servers adds an extra layer of security.

upvoted 0 times

...

Lavonna

8 months ago

I agree, option D seems like a very detailed rule to catch noncompliant OS changes.

upvoted 0 times

...