642-544 MARS - Implementing Cisco Security Monitoring, Analysis and Response System (Exam 1)

642-544 MARS - Implementing Cisco Security Monitoring, Analysis and Response System (Exam 1)

created by Fisher BRink (@fisher) at Feb. 8, 2016
  • What will happen if you try to run a Cisco Security MARS query that will take a lo...

  • The Cisco Security MARS appliance supports which protocol for data archiving and r...

  • What is a benefit of using the dollar variable (as in $TARGET01) when creating que...

  • A Cisco Security MARS appliance cannot access certain devices through the default ...

  • What are three ways to add devices to the Cisco Security MARS appliance? (Choose t...

  • Which three statements are true about Cisco Security MARS rules? (Choose three.)

  • Which of the following alert actions can be transmitted to a user as notification ...

  • To configure a Microsoft Windows IIS server to publish logs to the CiscoSecurity M...

  • What three data points are used to correlate reports in the Cisco Security MARS? (...

  • Refer to the exhibit.The Service variables defined are used for what purpose?

  • Refer to the Cisco Security MARS Event Management partial screen shown above. Whic...

  • Which statement is true about the case management feature of Cisco Security MARS?

  • What is a zone?

  • What protocol does Juniper NetScreen IDP use to exchange IPS events with the Cisco...

  • Which attack can be detected by Cisco Security MARS using NetFlow data?

  • Which two of the following statements are TRUE when you configure the pnreset comm...

  • At what level of operation does the Cisco Security MARS appliance perform NAT and ...

  • Which two configuration options enable the Cisco Security MARS appliance to perfor...

  • What is used to publish events to Cisco Security MARS about Cisco IPS signatures t...

  • Which statement best describes the case management feature of Cisco Security MARS?

Be the first to review
Login and Review
  • info
    Quiz Info
  • date_range
    Feb. 8, 2016, 3:38 a.m.
    help_outline
    20 questions
    dvr
    0 completed
    remove_red_eye
    5 views
    people
    0 takers
    folder

  • 642-544 MARS - Implementing Cisco Security Monitoring, Analysis and Response System (Exam 1) QR code

Ratings

star_borderstar_borderstar_borderstar_borderstar_border
ratings