Cisco 500-285 Exam
500-285 SSFIPS - Securing Cisco Networks with FireSIGHT Intrusion Prevention System (SSFIPS) - (not for Cisco Certification) (Page 6 )

Updated On: 1-Feb-2026

What are the two categories of variables that you can configure in Object Management?

  1. System Default Variables and FireSIGHT-Specific Variables
  2. System Default Variables and Procedural Variables
  3. Default Variables and Custom Variables
  4. Policy-Specific Variables and Procedural Variables

Answer(s): C



Which option is true regarding the $HOME_NET variable?

  1. is a policy-level variable
  2. has a default value of "all"
  3. defines the network the active policy protects
  4. is used by all rules to define the internal network

Answer(s): C



Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

  1. subscribe to a URL intelligence feed
  2. subscribe to a VRT
  3. upload a list that you create
  4. automatically upload lists from a network share

Answer(s): C



Which statement is true in regard to the Sourcefire Security Intelligence lists?

  1. The global blacklist universally allows all traffic through the managed device.
  2. The global whitelist cannot be edited.
  3. IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.
  4. The Security Intelligence lists cannot be updated.

Answer(s): C



How do you configure URL filtering?

  1. Add blocked URLs to the global blacklist.
  2. Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.
  3. Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.
  4. Create a variable.

Answer(s): C



Viewing page 6 of 13
Viewing questions 26 - 30 out of 59 questions



Post your Comments and Discuss Cisco 500-285 exam prep with other Community members:

Join the 500-285 Discussion